era-claim[.]top

Analysis of the domain era-claim.top indicates it was actively involved in a crypto drainer campaign targeting users through a fraudulent $ERA Genesis Token Drop. The domain, registered on February 21, 2026, via Web Commerce Communications Ltd, resolved to the IPv6 address 2606:4700:3034::6815:28a8, hosted on Cloudflare's infrastructure (AS13335). Nameservers ns100.webnic.cc and ns101.webnic.cc were configured, and the SSL certificate was issued by WE1.

At the time of assessment, the domain was offline, though its page title explicitly referenced the $ERA token distribution, aligning with the reported scam type of a crypto scam. Detection by security vendors remains limited but notable: one of 93 vendors on VirusTotal flagged the domain, while blocklists including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura had already listed it. The domain appears on five security blocklists, and Gridinsoft assigned a trust score of 0/100, reinforcing its malicious classification.

Defenders should treat this domain as part of a broader crypto drainer operation, particularly given its association with Cloudflare-hosted infrastructure commonly exploited for such campaigns. While the exact mechanics of the drainer remain unconfirmed due to the site's offline status, the combination of registration details, hosting provider, and targeted scam type provides sufficient evidence for blocking and monitoring. No additional brand impersonation beyond the $ERA token reference is confirmed in the available data.