claimtreasury[.]shop

The domain claimtreasury.shop has been identified as a brand impersonation phishing site specifically targeting Discord users. Currently offline, this domain was created on February 21, 2026, and hosted on IP address 152.114.193.126. The page title observed was "Pandu Pandas," which may have been used to lure visitors into a fake login page or crypto drainer scam. The site is now inactive, but its infrastructure remains a threat.

Technical indicators show that claimtreasury.shop is flagged by 5 out of 95 security vendors on VirusTotal, indicating moderate detection. It appears on 2 security blocklists and is listed in one AlienVault OTX threat intelligence pulse. The SSL certificate is rated E8, suggesting weak or misconfigured encryption. The domain's registration details and hosting IP point to a likely malicious setup, with the impersonation of Discord as the primary attack vector.

Given that the site is offline, immediate risk is low, but users should remain vigilant. PhishDestroy recommends avoiding any interaction with similar domains and verifying URLs before entering credentials. If you have already visited claimtreasury.shop, change your Discord password and enable two-factor authentication immediately. Always check domain reputation and report suspicious sites to security platforms.