claims[.]campnetwork[.]pro

Analysis of claims.campnetwork.pro indicates a crypto drainer scam domain registered on February 21, 2026. The domain is currently offline, returning an HTTP status that suggests it has been taken down or suspended. Infrastructure analysis reveals the domain resolves to 172.67.182.18, an IP address associated with Cloudflare, Inc. (AS13335) located in the United States. The SSL certificate is issued by WE1, a provider commonly used for low-cost or automated certificate issuance, which aligns with patterns observed in phishing infrastructure. The page title, 'Just a moment...', is consistent with Cloudflare interstitial pages but may also indicate a temporary holding state or proxy configuration used to obscure malicious content.

Detection data shows the domain appears on two security blocklists and is flagged by two of 93 security vendors on VirusTotal, specifically as a crypto scam. It is also blocked by PhishDestroy and ScamSniffer, two services specializing in phishing and scam domain detection. The scam type is classified as a crypto drainer, a threat designed to siphon cryptocurrency from victims' wallets through deceptive transactions or malicious smart contracts. No specific brand impersonation or additional page content has been confirmed in available data.

Defenders should treat this domain as a confirmed malicious indicator. Network-level blocking of the domain and its resolved IP (172.67.182.18) is recommended. Security teams should monitor for related domains using the 'campnetwork.pro' parent domain or similar naming patterns, as these may indicate additional phishing infrastructure. Given the domain's offline status, further analysis of historical content or payloads is not possible at this time, but retrospective threat hunting for connections to this domain in logs is advised.