claim-thememecoincult[.]com

Analysis of claim-thememecoincult.com, observed on July 24 2026, indicates an elevated risk profile associated with brand impersonation targeting the cryptocurrency brand phantom. The domain was registered on August 2 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to IP address 104.21.64.1, which is owned by Cloudflare, Inc. (AS13335) and geolocated in the United States. The site presented the page title "$MEMECOIN DISTRIBUTION" and was classified by threat intelligence as a Wallet/Seed Phishing operation, suggesting that it attempted to harvest cryptocurrency wallet credentials or recovery phrases. No TLS certificate was observed, meaning the site operated without HTTPS protection, a typical characteristic of low‑cost phishing infrastructure.

Security monitoring services have placed the domain on two blocklists, PhishDestroy and ScamSniffer, and both vendors have flagged it as malicious. VirusTotal scans returned two positive detections out of ninety‑five scanners, reinforcing the suspicion of malicious activity. Independent reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, effectively indicating no trusted standing. The domain’s authoritative nameservers, dante.ns.cloudflare.com and lilith.ns.cloudflare.com, are standard Cloudflare DNS endpoints, confirming the use of a widely available hosting platform.

As of the reporting date the domain is reported offline, which may be a temporary takedown or a shift to a new command‑and‑control location. Defenders should continue to block traffic to claim-thememecoincult.com at the network perimeter, update intrusion‑detection signatures to include the observed IP and domain indicators, and monitor for any resurgence of the same hosting configuration or similar page titles. Users of phantom‑related services should be warned about unsolicited communications referencing meme‑coin distributions and instructed to never provide wallet seeds or private keys to untrusted sites.