claim[.]bedrerockdao[.]com

Analysis of claim.bedrerockdao.com shows an active crypto‑drainer operation. The site returns HTTP 200 and displays the page title “欢迎光临～恭喜发财”, indicating a Chinese‑language landing page. Registration data reveal the domain was created on 21 February 2026 through Hello Internet Corp and is hosted behind Cloudflare, using nameservers aisha.ns.cloudflare.com and algin.ns.cloudflare.com. DNS resolution points to IP 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., located in the United States, and the TLS certificate is issued by Google Trust Services under the WE1 profile. Reputation checks indicate a Gridinsoft trust score of 0 / 100, and six of ninety‑three VirusTotal scanners have flagged the domain as malicious. The domain appears on two external blocklists and is already blocked by PhishDestroy and ScamSniffer, confirming its classification as a crypto scam. While the exact payload or wallet addresses used by the drainer are not disclosed in the available intelligence, the combination of a low trust score, multiple vendor detections, and active blocklist listings suggests a high‑confidence malicious intent. Defenders should block the domain at network perimeters, update endpoint allowlists to include the associated IP and nameservers, and monitor for any outbound connections to the resolved Cloudflare address. Continued observation is advised to capture any evolving command‑and‑control patterns or additional infrastructure deployments.