dgramclaim[.]network
This domain, dgramclaim.network, is flagged as a crypto drainer, a threat type designed to siphon cryptocurrency from victim wallets through deceptive transaction prompts or malicious smart contract interactions. As of the latest assessment, the domain is offline, though prior activity indicates it was actively used in campaigns targeting users of decentralized platforms. No legitimate brand impersonation has been confirmed, but the infrastructure aligns with known crypto-draining operations. Analysis indicates the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, which is proxied behind Cloudflare, a common tactic to obscure hosting origins and evade detection. The domain is flagged by 5 of 95 security vendors on VirusTotal, and it appears on one security blocklist, reflecting elevated risk. Technologies detected include HTTP/3, which may be leveraged to improve connection resilience and bypass certain network-based protections. Current status confirms dgramclaim.network is offline, though threat actors may reactivate or migrate the infrastructure to new domains. Organizations and individuals are advised to block the domain and its resolving IP at the network level. Cryptocurrency users should verify transaction prompts independently, avoid interacting with unsolicited links, and monitor wallet activity for unauthorized transfers. Security teams should review logs for connections to 188.114.97.3 or related domains registered through NiceNIC for retrospective detection of compromise.
Network Security Intelligence Registrar context
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-22 02:42:21 UTC
Technologies · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal Analysis
Archived Evidence
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive