claims-zeal[.]app

This domain, claims-zeal.app, is actively flagged as a crypto drainer phishing site with a high-risk classification. Registered on July 21, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP address 188.114.96.3 and utilizes Cloudflare nameservers (santino.ns.cloudflare.com and tricia.ns.cloudflare.com). Analysis indicates that 9 out of 91 security vendors on VirusTotal have detected malicious activity associated with this domain, and it appears on three security blocklists. Major security providers, including PhishDestroy, MetaMask, and SEAL, have already blocked access to this domain, reinforcing its classification as a threat.

Infrastructure analysis reveals the use of Cloudflare services, which may obscure deeper hosting details and complicate takedown efforts. The domain's recent registration and immediate detection by multiple security vendors suggest a targeted campaign, likely designed to exploit users in the cryptocurrency space. While the exact content of the site has not been fully analyzed, the designation as a crypto drainer implies it is engineered to siphon digital assets from victims' wallets through deceptive interactions.

Defenders should prioritize blocking this domain at the DNS and network levels, and users should be warned against interacting with any communications or links associated with claims-zeal.app. Given its active status and the involvement of established threat intelligence providers in its blocking, this domain poses a credible and immediate risk. Further monitoring and reporting to relevant security communities are recommended to mitigate its impact.