esl-claims[.]lat

This domain, esl-claims.lat, operates as a crypto drainer designed to steal cryptocurrency from victims by tricking them into connecting their digital wallets. Once a user interacts with the site, malicious scripts automatically siphon funds without authorization, often leaving victims with empty wallets and no recourse. The site specifically targets users who believe they are claiming rewards, airdrops, or other crypto-related incentives, exploiting common social engineering tactics in the blockchain space. Analysis indicates the domain was registered on May 24, 2026, through Dynadot LLC, a registrar frequently used for short-lived malicious domains. At the time of assessment, 22 out of 95 security vendors on VirusTotal flagged esl-claims.lat as malicious, with detections categorized under phishing and crypto-related threats. The domain lacks an SSL certificate, further reducing its legitimacy and increasing the risk of interception or tampering during data transmission. Infrastructure analysis reveals it previously resolved to the IP address 45.61.49.139, a host known for housing other high-risk domains. If you visited esl-claims.lat or interacted with any content on the site, immediate action is required. First, disconnect any connected wallets from the site and revoke all permissions granted to unknown or suspicious dApps using wallet management tools. Next, transfer remaining funds to a new, secure wallet and monitor all transaction histories for unauthorized activity. Report the incident to relevant blockchain security platforms and consider freezing compromised accounts if large sums were involved. Avoid reusing passwords or wallet addresses associated with the compromised site, and enable multi-factor authentication on all critical accounts to prevent further exploitation.