MALICIOUS — CRITICAL
claimloop[.]xyz
This domain, claimloop.xyz, is flagged as a high-risk crypto drainer as of July 12, 2026.
- VirusTotal
- 10/91
- Blocklists
- No stored match
- Disponibilité
- Dernier actif connu · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
claimloop.xyz — Dernier actif connu (HTTP 200). Type d'arnaque : Fake Airdrop. Résumé des preuves: VirusTotal 10/91 (alphaMountain.ai, BitDefender, CRDF, Forcepoint ThreatSeeker, Fortinet); PhishDestroy score 90/100. Bureau d’enregistrement: Namecheap.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Evidence Analysis
claimloop.xyz: High-Risk Crypto Drainer Detected
This domain, claimloop.xyz, is flagged as a high-risk crypto drainer as of July 12, 2026.
This domain, claimloop.xyz, is flagged as a high-risk crypto drainer as of July 12, 2026. The domain was created on May 11, 2026, and is currently active, resolving to the IP address 162.254.39.141, located in the United States and hosted by Namecheap, Inc. The domain has been identified in one threat intelligence pulse on AlienVault OTX and is listed on one security blocklist. It is specifically classified as a fake airdrop scam, which typically involves luring users with promises of free cryptocurrency in exchange for private wallet keys or other sensitive information. The page title 'Quick Reward Check' suggests a scheme designed to quickly attract and defraud users. The SSL certificate is issued by Sectigo Limited, which is a common practice for adding a veneer of legitimacy to malicious sites. PhishDestroy has blocked this domain, indicating that it poses a significant threat. Defenders are advised to monitor network traffic for connections to this domain, update blocklists, and educate users about the risks of fake airdrop scams. The exact content of the site has not been analyzed, but the domain’s associations and status suggest a high level of caution is warranted.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Couverture des données12 recorded checks
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Données factuelles et rapports externesIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.