claim-zama[.]live
claim-zama.live — Non vérifié. Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 5/91 (alphaMountain.ai, Chong Lua Dao, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); PhishDestroy score 65/100. Bureau d’enregistrement: Global Domain Group.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
The domain claim-zama.live was a crypto drainer phishing site designed to steal cryptocurrency from victims by draining wallet funds. It did not impersonate a known brand or use a publicly identified drainer kit. As of the latest verification, claim-zama.live has been taken offline, but it previously posed an elevated risk to users who may have interacted with it.
Technical indicators show that claim-zama.live was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, while Google Safe Browsing did not flag it. The domain appeared on 1 security blocklist (PhishDestroy) and was registered through Global Domain Group LLC on February 21, 2026. It resolved to the IP address 172.67.196.51, hosted by Cloudflare in the US (AS13335), and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Just a moment...', and the site employed Cloudflare Browser Insights, Cloudflare, and HTTP/3 technologies. Nameservers were naya.ns.cloudflare.com and cesar.ns.cloudflare.com.
Users who may have connected a wallet to claim-zama.live should immediately revoke all token approvals and transfer remaining funds to a new, secure wallet. Monitor transaction history for unauthorized activity and avoid interacting with suspicious links or domains. Report the domain to relevant platforms, such as cryptocurrency wallet providers, anti-phishing organizations, or local cybersecurity authorities, to help prevent further exploitation.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analyse VirusTotal
Preuves archivées
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of claim-zama.live · checked Apr 12, 2026
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif