claimjumper[.]app

Analysis of claimjumper.app indicates an active cryptocurrency drainer campaign as of July 12, 2026. The domain resolves to 157.230.143.142, hosted on AS14061 (DigitalOcean, LLC) in the United States. Infrastructure is routed through Cloudflare nameservers (lady.ns.cloudflare.com, noah.ns.cloudflare.com) and registered via Cloudflare, Inc. The site presents a page titled 'Welcome to Claim Jumper,' though the exact content and targeting mechanism remain unconfirmed. SSL certification is provided by Let's Encrypt (E8), a common choice for both legitimate and malicious domains. Detection data is limited but indicative of risk: one security vendor on a multi-engine scanning platform flags the domain, and it appears on a single blocklist. The domain is also blocked by an anti-phishing service, reinforcing its association with fraudulent activity. Gridinsoft assigns a trust score of 0/100, further suggesting malicious intent. The HTTP status returns 200, confirming the site is currently accessible. Defenders should treat this domain as high-risk. The combination of cryptocurrency-themed branding, Cloudflare-based infrastructure, and minimal but consistent detection aligns with known drainer operations. Network-level blocking of 157.230.143.142 and the domain itself is recommended. Monitoring for additional detection or takedown activity is advised, as the domain remains operational with no signs of remediation. If internal logs show user interaction with this domain, immediate investigation for wallet compromise is warranted.