claim[.]tavaera[.]network

The domain claim.tavaera.network was observed hosting a crypto‑drainer operation and is currently offline as of July 22, 2026. The only publicly visible artifact is the page title “Nur einen Moment…”, a phrase commonly used by scam sites to create a brief waiting experience before redirecting victims to malicious payloads. No SSL certificate was presented, meaning the site served traffic over plain HTTP, which is typical for low‑cost fraud infrastructure. Nameserver information was not disclosed, and the domain resolves to the IP address 104.21.22.190, an address owned by AS13335 Cloudflare, Inc. in the United States.

Cloudflare’s network often provides shared hosting, complicating attribution of the underlying operator. The IP is listed on one security blocklist and has been explicitly blocked by PhishDestroy, indicating that at least one external security service has deemed the host malicious. Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating, reinforcing the malicious assessment. VirusTotal scanned the domain with 95 antivirus and URL‑reputation vendors; none flagged it, but the absence of detections does not constitute evidence of safety, especially given the other adverse indicators.

The site’s classification as a “Crypto Scam” aligns with the threat type “crypto drainer”, suggesting it was intended to siphon cryptocurrency assets from unsuspecting users. Concrete evidence beyond the page title, IP address, blocklist status, and trust score is not presently available, leaving the exact phishing kit, targeted brand, and victim interaction flow unknown. Defenders should add claim.tavaera.network to local and network‑wide blocklists, monitor the associated Cloudflare IP for any re‑hosting activity, and enforce TLS inspection where possible to detect future attempts to use the same infrastructure.