claim[.]bitlayers[.]xyz

The domain claim.bitlayers.xyz is a phishing site engaged in brand impersonation targeting Coinbase users. It presents itself as a cryptocurrency-related platform under the guise of 'Bitlayer', attempting to deceive victims into disclosing sensitive information or transferring digital assets. No drainer kit was identified in this campaign. As of the latest verification, claim.bitlayers.xyz has been taken offline, though prior activity classified it as an elevated-risk threat.

Technical indicators confirm the malicious nature of claim.bitlayers.xyz. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Forcepoint ThreatSeeker. It appears on two security blocklists, PhishDestroy and ScamSniffer, and holds a Gridinsoft trust score of 0/100. The domain was created on February 21, 2026, and resolves to the IP address 172.67.132.145, hosted on Cloudflare's infrastructure (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title was 'Bitlayer'. No registrar information is available for this domain.

Individuals who interacted with claim.bitlayers.xyz should take immediate action to secure their accounts and assets. For cryptocurrency-related exposure, revoke any token approvals granted to the site and transfer funds to a new wallet. If login credentials were entered, change passwords immediately, enable two-factor authentication, and monitor accounts for unauthorized activity. Report the phishing domain to relevant platforms, including Google Safe Browsing, ScamSniffer, and Coinbase’s official fraud reporting channels to aid in mitigation efforts.