claimdrop[.]club

Analysis of claimdrop.club, observed on July 22 2026, shows an active infrastructure that supports a crypto‑drainer campaign. The domain resolves to the IPv4 address 192.142.10.5 and is hosted on nameservers ns1.ultahost.com, ns2.ultahost.com, ns3.ultahost.com, and ns4.ultahost.com. Registration information lists Spaceship, Inc. as the registrar, with the domain creation date recorded as June 28 2025. VirusTotal scans have returned 14 positive detections out of 95 security‑vendor submissions, indicating a notable level of malicious classification across multiple engines.

The domain appears on one security blocklist and is explicitly blocked by the PhishDestroy feed, reinforcing its reputation as a malicious resource. Threat intelligence tags assign the domain a high risk rating and label it as a crypto drainer, consistent with observed activity aimed at illicitly diverting cryptocurrency assets. No publicly available SSL certificate details, HTTP status codes, page title, or additional evidence links have been disclosed, leaving the exact web content and transport security posture unverified.

Likewise, there are no recorded references in open‑source threat‑sharing platforms such as OTX. Given the confirmed malicious detections, blocklist presence, and active status, defenders should prioritize immediate mitigation: block claimdrop.club at the DNS and proxy layers, deny traffic to the associated IP address, and add the domain to internal threat‑intel feeds. Continuous monitoring for any changes in detection counts, additional blocklist listings, or newly observed infrastructure components is recommended to maintain up‑to‑date protection against this high‑risk crypto‑drainer operation.