claims[.]eclipsle[.]xyz

PhishDestroy identifies claims.eclipsle.xyz as a domain involved in brand impersonation, specifically targeting the orca brand, and utilizing a drainer kit to deceive users. This domain was flagged due to its malicious intent, posing an elevated risk to users who may interact with it.

The technical indicators for claims.eclipsle.xyz reveal a VT score of 6/95, indicating that a significant number of security vendors have flagged this domain, and it resolves to the IP address 104.21.48.1, which was created on February 21, 2026, and is registered with a specific registrar, currently appearing on 1 security blocklist, and holding an SSL certificate issued by WE1.

As claims.eclipsle.xyz is currently offline, the immediate risk has been mitigated, however, users are still advised to exercise caution, as the domain's infrastructure and associated malware may still pose a residual threat, thus it is crucial to remain vigilant and monitor for any future malicious activity, ensuring the security of user data and preventing potential financial losses.