claim-irys[.]pro
“Nur einen Moment…”
Resumen de las pruebas
This domain, claim-irys.pro, is identified as a crypto drainer, a type of malicious infrastructure designed to siphon cryptocurrency from victims' wallets without authorization. Analysis indicates no direct brand impersonation, but the domain operates as part of a broader drainer kit network, likely targeting users through deceptive transaction prompts or fake token claims. The absence of a legitimate brand association increases the risk of social engineering tactics, where victims are tricked into connecting wallets under false pretenses, such as airdrop participation or token migration schemes.
Technical indicators confirm elevated risk: the domain is flagged by 4 out of 95 security vendors on VirusTotal, with a Scamadviser trust score of 1/100 and a Gridinsoft trust score of 0/100. Infrastructure analysis reveals registration through Cloudflare, Inc., resolving to the IP address 188.114.96.3. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Creation date metadata is unavailable, but the use of Cloudflare’s registrar and hosting infrastructure is consistent with threat actors seeking anonymity and resilience against takedowns. Google Safe Browsing (GSB) status remains unconfirmed, but the combination of low trust scores and vendor detections underscores the domain’s malicious intent.
As of the latest assessment, claim-irys.pro has been taken offline, likely due to enforcement actions or infrastructure suspension. However, the risk persists for users who may have interacted with the domain prior to its deactivation, particularly if wallet connections or transactions were initiated. Remaining risk includes potential follow-up attacks via associated phishing vectors or secondary domains linked to the same threat actor. Users are advised to revoke any wallet permissions granted to unknown or suspicious domains, monitor transaction histories for unauthorized activity, and verify domain legitimacy through independent sources before engaging with cryptocurrency-related prompts.
Data Coverage
Señales de seguridad
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 12/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Inteligencia forense
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.