claim-yzy[.]com

Analysis of claim-yzy.com indicates that the domain is being used as a crypto‑draining scam. The site was registered on August 22, 2025 through OwnRegistrar, Inc. and resolves to the Cloudflare edge address 104.21.89.224, an IP located in the United States and associated with AS13335 Cloudflare, Inc. No SSL certificate is present, meaning the site was reachable only via plain HTTP. The page title returned by the server is "Yzy Rewards Proposal," which aligns with the reported crypto scam classification. Infrastructure data shows the domain is served by the nameservers maxim.ns.cloudflare.com, meiling.ns.cloudflare.com, and a placeholder entry "null," suggesting a typical Cloudflare configuration that can obscure the true backend host.

Reputation checks reveal the domain appears on two security blocklists, specifically PhishDestroy and ScamSniffer, and has been flagged by one of ninety‑five VirusTotal scanners. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The site’s current status is offline, indicating that the malicious content has been taken down or the infrastructure has been disabled, but the underlying registration and DNS configuration remain in place.

Defenders should continue to block the domain at perimeter defenses, monitor the associated IP range for re‑hosting activity, and watch for newly registered domains that reuse the same registrar or similar naming patterns. Because the domain uses Cloudflare’s public DNS and edge services, any future re‑activation could be obscured, so ongoing DNS and passive DNS surveillance is recommended. Additionally, security teams should update threat‑intel feeds to include claim-yzy.com as a confirmed crypto‑drainer, ensuring that automated detection systems can flag any resurgence promptly.