claim-piasma[.]com

This domain, claim-piasma.com, is identified as a crypto drainer, a threat type designed to illicitly siphon cryptocurrency assets from victims by deceiving users into authorizing malicious transactions. The domain is currently offline, though prior activity suggests it may have impersonated legitimate wallet or DeFi platforms to exploit user trust. No specific brand impersonation has been confirmed, but the infrastructure aligns with known crypto-theft campaigns. Analysis indicates the domain was created on September 30, 2025, and is registered through Web Commerce Communications Limited. It resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.), a common obfuscation tactic to mask backend infrastructure. The domain appears on five security blocklists and is flagged by 13 of 95 vendors on VirusTotal, including detections from PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. Notably, the domain lacks an SSL certificate, a red flag for fraudulent sites, and its creation date suggests it was operational for a short, targeted campaign. The domain’s current offline status does not eliminate its risk, as similar infrastructure may re-emerge under different names. Organizations and users are advised to block the domain and its associated IP (188.114.97.3) at the network level. Wallet providers should monitor for transaction requests originating from this domain’s unique seed (6b077f) and alert users to revoke any suspicious authorizations. Proactive measures include deploying endpoint detection rules for crypto-related phishing domains and educating users on verifying transaction prompts before approval.