reclaimgas[.]com

Analysis of the domain reclaimgas.com indicates it is actively associated with a high-risk crypto drainer campaign as of July 26, 2026. The domain was registered on May 22, 2026, through MAT BAO CORPORATION, a registrar frequently utilized in fraudulent operations. Infrastructure analysis reveals the domain resolves to the IP address 188.114.96.3, which is hosted on Cloudflare nameservers (ingrid.ns.cloudflare.com and todd.ns.cloudflare.com). While VirusTotal scans conducted by 91 security vendors currently show no detections, this absence does not confirm safety, as crypto drainers often evade initial detection through obfuscation or delayed flagging. The domain appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, which explicitly classify it as malicious.

These listings align with the reported threat type of a crypto drainer, a tool designed to siphon cryptocurrency from victims' wallets. The unique seed identifier 30f150 further corroborates its association with this campaign. No contradictory evidence, such as benign categorization or Safe Browsing warnings, was observed in the available data. Defenders should treat reclaimgas.com as an active threat.

Network-level blocking is recommended, particularly for organizations handling cryptocurrency transactions or wallet integrations. Given the domain's recent registration and Cloudflare hosting, monitoring for related domains or IP shifts is advised. The lack of detections on VirusTotal underscores the need for multi-layered defenses, including real-time blocklist updates and behavioral analysis tools. Further investigation into the IP's hosting provider and associated domains may reveal additional infrastructure linked to this campaign.