claimcryptorewardz-bonus[.]lol

The domain claimcryptorewardz-bonus.lol was registered on 21 February 2026 and is presently taken offline. DNS resolution points to the IP address 142.250.186.132, which belongs to AS15169 owned by Google LLC and is geolocated in the United States. The site presented an SSL certificate identified as WE2, indicating that Transport Layer Security was in place despite the fraudulent purpose. The HTML title returned by the server is “Google”, matching the declared brand target of Google and aligning with the classification of a tech‑support impersonation campaign.

VirusTotal recorded two positive detections out of ninety‑three submitted scanners, confirming that at least a subset of security products recognized malicious behavior. Independent reputation services have assigned a Gridinsoft trust score of zero out of one hundred, reflecting an extremely low confidence in the domain’s legitimacy. The domain appears on four public blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—providing additional corroboration of its abusive nature. The overall risk rating is elevated, consistent with the combination of brand impersonation, a tech‑support scam vector, and the presence on multiple blocklists.

Although the site is no longer reachable, the infrastructure components—particularly the use of a Google‑owned IP address and a valid TLS certificate—demonstrate a deliberate attempt to lend credibility to the fraudulent page. Defenders should continue to enforce blocking of the domain across network perimeter controls, update local blocklists with the identified sources, and monitor for any re‑registration or similar patterns that reuse the same IP range or TLS attributes. Ongoing surveillance of related indicators, such as the WE2 certificate fingerprint and the specific blocklist entries, will aid in early detection of successor campaigns.