claim[.]skatechainteam[.]xyz

Analysis of claim.skatechainteam.xyz, observed as a crypto‑drainer site, shows that the domain was registered through NameSilo on 16 June 2025 and points to the Cloudflare edge address 104.21.32.1, located in the United States under ASN 13335. The site presented the page title “Un instant…”, did not serve an SSL certificate, and relied on Cloudflare’s authoritative nameservers dee.ns.cloudflare.com and miles.ns.cloudflare.com. VirusTotal recorded three positive detections out of ninety‑five scanners, indicating that a minority of AV engines flagged the domain as malicious.

Independent reputation services corroborate the risk: Gridinsoft assigned a trust score of zero out of one hundred, PhishDestroy listed the domain as blocked, and it appears on a single external security blocklist. The lack of HTTPS, combined with a zero trust rating and multiple vendor flags, aligns with the reported crypto‑scam classification. Current DNS queries show the domain has been taken offline, which may be the result of takedown actions or temporary hosting disruption.

Defenders should continue to block the domain at perimeter and DNS layers, monitor for any resurgence of the IP address or associated Cloudflare nameservers, and consider adding the domain to internal block lists. Because the underlying infrastructure is hosted on a shared Cloudflare network, future malicious actors could reuse the same IP range, so broader IP‑based filtering for 104.21.32.0/20 is advisable. Ongoing observation of the registrar NameSilo for new registrations that reuse the “skatechainteam” keyword may help detect related campaigns early.