claim-offers[.]store

This domain is flagged as an elevated-risk crypto drainer, a threat type designed to siphon cryptocurrency assets from victims through deceptive smart contract interactions. Analysis indicates the infrastructure is specifically engineered to exploit wallet connections, tricking users into authorizing unauthorized transactions that drain funds irreversibly. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain claim-offers.store is detected by 3 out of 95 security vendors on VirusTotal and appears on 3 distinct security blocklists. It was registered through GoDaddy.com, LLC on March 29, 2026, an anomalous future date suggesting potential domain spoofing or registry manipulation. The site resolves to IP address 76.223.105.230 and employs technologies including GoDaddy Website Builder, RequireJS, reCAPTCHA, Re:amaze, and HSTS. Gridinsoft assigns a trust score of 0/100, and the domain is actively blocked by wallet security tools and phishing detection systems. The SSL certificate is issued by GoDaddy.com, though this does not mitigate the underlying malicious intent. Mitigation against crypto drainer threats requires immediate action to prevent asset loss. Users should revoke any smart contract approvals granted to this domain via wallet security tools, particularly those involving token spending or transaction permissions. Block the domain at the network level using DNS filtering or browser-based security extensions to prevent accidental re-exposure. Verify wallet addresses and transaction details independently before signing any blockchain interactions, as crypto drainers often manipulate displayed information. If funds were transferred to this domain, document all transaction hashes and wallet addresses for potential recovery efforts or law enforcement reporting. Monitor connected wallets for unauthorized activity and consider migrating assets to a new wallet if compromise is confirmed.