claimly[.]ru

PhishDestroy has identified claimly.ru as an elevated-risk crypto drainer domain, a specific type of malicious site designed to steal cryptocurrency wallets and assets through deceptive transactions. The domain was registered through REGRU-RU and created on February 21, 2026, with a page title of "Claimly" that likely lures victims with fake airdrops or rewards. Security intelligence shows that VirusTotal flags this site with 2 out of 95 vendors marking it as malicious, while it also appears on one security blocklist. The domain resolves to IP address 31.31.196.75 and uses an SSL certificate from GlobalSign nv-sa / GlobalSign GCC R3 DV TLS CA 2020, which may lend it a false sense of legitimacy. Currently, the site is offline, but it remains a threat as it could be reactivated or used in future campaigns.

To protect against crypto drainers like claimly.ru, users should never connect their wallets to unknown or suspicious websites, especially those promising free tokens or airdrops. Always verify the legitimacy of a domain through independent sources and avoid clicking on links from unsolicited messages or social media posts. Enable two-factor authentication on all crypto accounts and consider using hardware wallets for large holdings. If you have interacted with this domain, immediately revoke any token approvals and transfer funds to a new, secure wallet. PhishDestroy recommends reporting such domains to relevant security platforms and staying informed about emerging threats in the crypto space.