claimdexterminals[.]cc

Analysis of claimdexterminals.cc indicates a newly registered domain associated with a crypto drainer campaign. The domain was created on July 12, 2026 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It remains active as of the report date, July 15, 2026. DNS resolution points to the IP address 104.21.27.105, and the domain is served by Cloudflare nameservers bonnie.ns.cloudflare.com and junade.ns.cloudflare.com. VirusTotal records show that the domain has been scanned by 91 vendors, with no current detections reported; however, the absence of detections does not confirm safety. The limited observable infrastructure—registration details, IP hosting, and DNS configuration—provides a baseline for attribution but offers no insight into the payload or phishing content, which remains unverified. Uncertainty persists regarding the specific mechanisms employed to drain cryptocurrency, the extent of victim impact, and any additional command-and-control infrastructure. Defenders should monitor DNS queries for the associated IP and nameservers, block network traffic to the domain, and incorporate the domain indicator into threat intelligence feeds. Continuous re‑scanning with multiple analysis engines is recommended to detect any future malicious behavior.