claimgifts[.]us

This domain, claimgifts.us, operates as a crypto_drainer, a type of malicious infrastructure designed to siphon cryptocurrency from victims' digital wallets. The site lures users by presenting a fraudulent offer for a $500 Pandora voucher, exploiting trust in well-known brands to trick visitors into connecting their wallets. Once connected, the site executes unauthorized transactions, draining funds without consent. The threat is particularly insidious because it does not rely on traditional malware but instead manipulates users into granting access directly through their wallet interfaces.

Analysis indicates that claimgifts.us was registered on June 13, 2026, through NAMECHEAP INC, a registrar frequently exploited for malicious domains. The domain resolves to the IP address 185.158.133.1 and is protected by Cloudflare, a common tactic to obscure hosting details and evade takedowns. Security vendors have flagged this domain with a detection ratio of 1/95 on VirusTotal, and it appears on three distinct security blocklists. Additionally, AlienVault OTX records show the domain in two threat intelligence pulses, further confirming its malicious intent. The domain's Gridinsoft trust score of 0/100 reinforces its classification as a high-risk entity.

If a user visited claimgifts.us and interacted with the site, immediate action is required to mitigate potential losses. First, disconnect any connected wallets from the site and revoke all permissions granted to unknown or suspicious applications. Next, transfer remaining funds to a new, secure wallet address not previously exposed to the malicious domain. Monitor all connected accounts for unauthorized transactions and enable multi-factor authentication where possible. Users should also scan their devices for malware, as crypto_drainers may deploy additional payloads. Finally, report the incident to relevant blockchain security platforms to assist in tracking and disrupting the threat actor's infrastructure.