clawtrencher[.]xyz
“Clawtrencher | AI-Powered Solana Trading Bot”
clawtrencher.xyz — Belum terverifikasi. Peniruan identitas merek: Solana; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 5/93 (ADMINUSLabs, Forcepoint ThreatSeeker, Fortinet, Kaspersky, SOCRadar); URLQuery 1 alert; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 69/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
clawtrencher.xyz is a domain registered on 23 February 2026 through NiceNIC International Group Co., Limited. The domain resolves to the IP address 188.114.96.3, which is part of AS13335 Cloudflare, Inc. and geolocated to the United States. No TLS certificate is presented for the host, and HTTP requests return no content because the site is currently taken offline. The authoritative nameservers are elias.ns.cloudflare.com and kim.ns.cloudflare.com, indicating the use of Cloudflare’s DNS services.
The page title retrieved before takedown was “Clawtrencher | AI‑Powered Solana Trading Bot”, and the domain is classified as a crypto‑scam that impersonates the Solana brand. VirusTotal analysis shows that five of ninety‑three scanning engines flagged the domain, reflecting a moderate level of malicious confidence. The domain appears on three public blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, confirming that multiple security vendors have observed abusive activity associated with this host.
Available evidence establishes a clear link between the domain and a brand‑impersonation campaign targeting Solana users, likely leveraging the promise of an AI‑driven trading bot to lure victims. The lack of an SSL certificate and the current offline status limit further technical inspection of the payload, so the exact content and any potential malicious scripts remain unknown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration or resurrection of the host, and update endpoint and browser protection rules to include the observed indicator set (domain name, IP address, and associated blocklist entries).
Intelijen Keamanan Jaringan Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | clawtrencher.xyz |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-17 02:55:40 UTC
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260223-659C53 Recipient: abuse@nicenic.net, abuse@gen.xyz, compliance@icann.org Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive