Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@namecheap.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
clawmintwlfi[.]xyz
“ClawMint — AI Agent NFT Platform on BSC”
clawmintwlfi.xyz — ढका हुआ · पहुंच योग्य. घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 6/91 (alphaMountain.ai, Chong Lua Dao, CRDF, Forcepoint ThreatSeeker, Gridinsoft); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 93/100. रजिस्ट्रार: NameCheap.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis of the domain clawmintwlfi.xyz indicates it is an active crypto drainer phishing site targeting users of the Binance Smart Chain (BSC) ecosystem. The domain was registered on March 6, 2026, through NameCheap, Inc., and currently resolves to the IP address 216.198.79.1. The site presents itself as an 'AI Agent NFT Platform on BSC,' as evidenced by its page title, suggesting an attempt to lure victims into interacting with malicious smart contracts designed to drain cryptocurrency assets. Infrastructure analysis reveals the domain is flagged by four security blocklists, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. Additionally, it appears in 23 threat intelligence pulses on AlienVault OTX, further corroborating its malicious classification. While six of 95 security vendors on VirusTotal have detected the domain as malicious, the remaining vendors have not yet issued detections, indicating variability in coverage across detection systems. The domain maintains an SSL certificate issued by Let's Encrypt, a common tactic to lend an appearance of legitimacy to phishing sites. Defenders should treat this domain as high-risk due to its confirmed association with crypto draining activity. The domain remains active as of July 12, 2026, and no evidence suggests takedown efforts have been successful. Network-level blocking of the resolving IP (216.198.79.1) and domain-level blocking are recommended to mitigate exposure. The exact content and mechanics of the phishing kit are not yet analyzed, but the combination of blocklist presence, threat intelligence reporting, and the domain's stated purpose align with known crypto drainer campaigns. Further investigation into associated wallet addresses and smart contracts is advised to disrupt the broader infrastructure.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | clawmintwlfi.xyz |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of clawmintwlfi.xyz · checked Jul 13, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260306-E93C44 Recipient: abuse@namecheap.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।