claim[.]lovelaceclub[.]com

This domain, claim.lovelaceclub.com, is actively flagged as a high-risk crypto drainer targeting cryptocurrency users. Analysis indicates the site presents itself as an 'Ergo Claim' portal, as evidenced by the page title 'Ergo Claim | Lovelace Club.' The domain was registered on September 13, 2022, through GoDaddy.com, LLC, and remains operational as of July 12, 2026. It resolves to the IP address 216.150.16.65, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The domain utilizes nameservers ns39.domaincontrol.com and ns40.domaincontrol.com, consistent with GoDaddy-managed DNS configurations. Infrastructure analysis reveals the use of a Let's Encrypt SSL certificate (R12), which provides HTTPS encryption but does not validate the legitimacy of the site. The domain is detected by one security vendor on VirusTotal (1/95) and appears on a single security blocklist, suggesting limited but present detection coverage. Technologies identified include WebAssembly, Vercel, and HTTP Strict Transport Security (HSTS), which may be employed to enhance the site's functionality and perceived credibility while facilitating malicious operations. The exact mechanics of the crypto drainer remain unverified due to the absence of deeper forensic analysis, but the classification aligns with known tactics used to siphon cryptocurrency from victims' wallets. Defenders should prioritize blocking this domain at the DNS and network levels, particularly in environments where cryptocurrency transactions occur. Monitoring for connections to the IP address 216.150.16.65 and associated domains under the lovelaceclub.com namespace is recommended to mitigate potential exposure. Given the domain's age and continued activity, it is likely part of a persistent campaign rather than a short-lived operation.