claimcryptorewards-bonus[.]us

The domain claimcryptorewards-bonus.us was registered on February 21, 2026 through Web Commerce Communications Limited dba WebNic.cc and is currently taken offline. Infrastructure analysis shows the domain resolves to IP 172.67.179.119, which belongs to AS13335 Cloudflare, Inc. and is located in the United States. The authoritative nameservers are rayden.ns.cloudflare.com and irena.ns.cloudflare.com, confirming Cloudflare as the DNS provider. The site presented the page title "Suspected phishing site | Cloudflare" and employed Cloudflare services with HTTP/3 enabled.

The SSL certificate is issued by Google Trust Services under the WE1 identifier, indicating a valid TLS chain but offering no guarantee of legitimacy. Reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. VirusTotal scans reported six detections out of ninety‑three security vendors, reinforcing the malicious classification. AlienVault OTX referenced the domain in a single threat‑intel pulse, further confirming its association with crypto‑draining activity.

While the exact phishing lure or target brand is not disclosed in the available data, the combination of low trust score, blocklist presence, and vendor detections suggests a high likelihood of a crypto‑drainer operation. Defenders should continue to block the domain at network perimeter, monitor for any residual traffic to the associated IP, and update endpoint detection rules to flag the observed SSL certificate and HTTP/3 fingerprint. Ongoing reconnaissance should verify whether the domain reappears under a different subdomain or IP, and threat‑intel feeds should be consulted for any emerging indicators related to this infrastructure.