claimlulo[.]xyz

This report analyzes claimlulo.xyz, a domain associated with a cryptocurrency scam. The page title "Lulo" suggests the site was designed to impersonate or mislead users into believing it is a legitimate cryptocurrency platform. The primary threat is financial fraud, as such sites typically aim to trick victims into depositing cryptocurrency under false pretenses, often through fake investment schemes or wallet connections.

Technical evidence confirms the malicious nature of this domain. VirusTotal flagged it with 7 detections out of 95 security vendors. The domain was created on 2026-02-21 and registered through NiceNIC International Group Co., Limited. It is hosted on IP address 104.21.83.162, located in the United States and assigned to AS13335 Cloudflare, Inc. The domain has no SSL certificate. Two blocklists have identified it as a threat, and security vendors including alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, and SOCRadar have flagged it. GridinSoft assigns a trust rating of 0 out of 100.

The domain is currently offline and not resolving. Despite its inactive status, the risk level remains high due to its clear association with cryptocurrency scams and the number of security vendor detections. The domain may be reactivated for future campaigns, and users should avoid any interaction with it.