claimearth[.]app

This domain, claimearth.app, is currently under investigation for its potential involvement in crypto drainer activities. The domain was registered on April 22, 2026, through Namecheap Inc., and it is currently active. The infrastructure analysis reveals that the domain resolves to the IP address 162.255.119.120, which is located in the United States and is hosted by Web-hosting.com. The domain has been flagged on one security blocklist, and its Gridinsoft trust score is 0 out of 100, indicating a significant lack of trust in the domain's legitimacy. PhishDestroy has blocked this domain, further suggesting that it is associated with malicious activities. The domain does not have an SSL certificate, which is a common trait of phishing sites as they often forgo secure connections to avoid additional scrutiny. The MX records indicate that the domain is configured to use eforward2.registrar-servers.com, suggesting that it may be using a service to handle email forwarding, which could be another sign of a domain being used for temporary or malicious purposes. Defenders should monitor the domain for any signs of crypto drainer activity, such as the presence of malicious scripts or redirects to known scam sites. While the domain has not been flagged by VirusTotal, the lack of detections does not guarantee safety, as many phishing domains operate for short periods and may evade initial detection. Network administrators should consider blocking the domain at the firewall or DNS level to prevent users from accessing it. Additionally, regular updates to security policies and user education on identifying phishing attempts can mitigate the risk of falling victim to this type of threat. Ongoing monitoring and correlation with other threat intelligence sources are recommended to stay informed about any new developments or related malicious activities.