claimingritualsprize[.]info

claimingritualsprize.info was registered on February 21, 2026 through NameSilo, LLC and presently resolves to the IP address 172.67.203.28, which belongs to Cloudflare, Inc. (AS13335) located in the United States. The site presents a single page whose title is “Just a moment…”, and the HTTP response returns a 403 status code. TLS termination is provided by a Google Trust Services certificate issued to the WE1 entity, indicating the connection is encrypted via Cloudflare’s edge. The infrastructure makes use of Cloudflare’s HTTP/3 protocol and is served from the nameservers elle.ns.cloudflare.com and mcgrory.ns.cloudflare.com.

Reputation data shows a Gridinsoft trust score of 0 out of 100, classifying the domain as highly untrustworthy. The domain is listed on at least one public blocklist and has been actively blocked by the PhishDestroy service. VirusTotal analysis reports that one out of ninety‑three security vendors flagged the domain, confirming the presence of malicious activity. The threat type assigned to this domain is a crypto drainer, consistent with the broader “Crypto Scam” classification.

While the exact phishing lures or wallet addresses used by the campaign have not been publicly disclosed, the combination of a newly created domain, Cloudflare front‑end, low trust score, blocklist inclusion, and the single “Just a moment…” page strongly suggests an attempt to lure cryptocurrency users into submitting private keys or transaction details. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any outbound connections to the associated IP, and update endpoint detection rules to flag the lone vendor detection reported by VirusTotal. Ongoing observation of the domain’s DNS records and any changes to its content is recommended, as the current evidence indicates an active, high‑risk crypto‑draining operation.