claimdiamond[.]web[.]id

Analysis of claimdiamond.web.id as of July 24, 2026 indicates that the domain was registered on February 21, 2026 and is currently offline. The site resolves to the IP address 188.114.96.3, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The domain presents a TLS certificate identified as WE1, confirming that HTTPS is available when the site is reachable. The page title returned by the server is "Nur einen Moment…", a German phrase meaning "Just a moment…".

The domain is classified as a crypto drainer under the broader crypto scam category and appears on a single security blocklist, specifically PhishDestroy, which has listed the domain as malicious. VirusTotal records show that the domain was scanned by 93 vendors, and at the time of the scan no vendor flagged it as malicious; however, the absence of detections does not constitute a safety guarantee. The threat is still under investigation, and the current offline status prevents real‑time interaction, but the combination of recent registration, use of a Cloudflare edge IP, a generic page title, and inclusion on a known blocklist aligns with typical infrastructure patterns observed in crypto‑draining campaigns.

Defenders should continue to monitor the domain for any re‑activation, enforce blocklist rules that include claimdiamond.web.id, and consider adding the domain to internal deny lists. Network traffic to the associated IP should be inspected for anomalous cryptocurrency‑related activity, and any client attempts to resolve or connect to the domain should be logged and investigated. Given the limited public evidence, the primary actionable steps are containment through blocklisting and ongoing telemetry collection to detect potential resurgence.