# claim-lornbard.finance — SUSPICIOUS

> claim-lornbard.finance is a live crypto drainer targeting wallets via deceptive claims. VirusTotal flags 0/95 engines; verify safety on PhishDestroy before.

## Summary
PhishDestroy identifies claim-lornbard.finance as an active cryptocurrency drainer site. The domain masquerades as a legitimate platform to trick users into connecting crypto wallets and signing malicious transactions that drain funds. The site employs a drainer kit designed to intercept wallet connections and execute unauthorized transfers under the guise of claim processes. No specific brand impersonation is noted in current samples, but the modus operandi aligns with recent crypto-draining campaigns targeting unsuspecting investors.  

This domain resolves to IP 104.21.58.3 and uses a Let’s Encrypt SSL certificate. It was created on March 18, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. As of the latest scan, VirusTotal shows 0 out of 95 security engines detecting the domain, and it remains unlisted on Google Safe Browsing and major threat blocklists. The domain’s recent creation and clean detection status suggest it is newly deployed and actively evading early detection measures.  

The site is currently active and poses a high risk to cryptocurrency users. PhishDestroy has flagged this domain under investigation with seed b8ada8. Users are strongly advised not to interact with claim-lornbard.finance or any linked wallet connection prompts. Immediate verification on PhishDestroy is recommended for anyone who may have visited the site. While the current risk level is under investigation, the presence of a live drainer kit indicates imminent danger to connected wallets. Ongoing monitoring is in effect to track domain behavior and update defenses.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-18 11:19:38
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.58.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/fbf4b2ff-5387-4dd4-8d82-9bed7614847e
- PhishDestroy: https://phishdestroy.io/domain/claim-lornbard.finance/
- LLM endpoint: https://phishdestroy.io/domain/claim-lornbard.finance/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/claim-lornbard.finance/
Last updated: 2026-03-23