claimblumairdrp[.]com

Analysis of claimblumairdrp.com indicates that the domain was registered on 27 September 2024 through the HOSTINGER operations, UAB registrar. The authoritative nameservers are paloma.ns.cloudflare.com and yisroel.ns.cloudflare.com, directing the domain to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (ASN 13335) and is geolocated in the United States. No TLS certificate is present, meaning the site would be served over plain HTTP if accessed.

The only visible HTTP artifact is the page title “Nur einen Moment…”, a generic placeholder that does not reveal any targeted brand or service. The domain is listed on a single public blocklist, PhishDestroy, and has been recorded by VirusTotal with scans from 95 vendors, none of which flagged the domain at the time of scanning. The absence of detections does not constitute a safety assurance, and the lack of additional intelligence such as malware payloads, phishing templates, or command‑and‑control endpoints limits the depth of the current assessment.

The site is presently taken offline, and its risk level remains marked as “under investigation.” Defenders should continue to block the domain at DNS and proxy layers, monitor any future resolution attempts, and consider adding the domain to internal blocklists. Ongoing observation of the hosting provider and the Cloudflare IP range is advisable, as the infrastructure could be reused for subsequent crypto‑drainer campaigns. Further analysis is required to determine whether the page title is part of a broader phishing kit or merely a placeholder, and to verify if any additional assets are associated with the same IP address.