web3[.]claim-enso[.]shop

The domain www.web3.claim-enso.shop was registered on February 21, 2026 and is presently listed as offline after being taken down. Host analysis shows it resolves to the IPv4 address 102.218.215.37, which is allocated to AS329184 Host Africa (Pty) Ltd in South Africa (ZA). The site presented the page title "Web3 Dapp Resolver," consistent with a crypto‑related service, and is classified as a crypto scam, specifically a crypto drainer, in the supplied intelligence.

The SSL certificate is identified as type R12, indicating a low‑trust certificate, and the Gridinsoft trust score is recorded as 0 out of 100, reflecting a complete lack of confidence in the host. The domain appears on a single security blocklist and has been flagged by two of ninety‑three VirusTotal security vendors, providing additional confirmation of malicious intent. PhishDestroy has also blocked the domain, reinforcing its reputation as a threat vector.

While the exact phishing or draining mechanisms have not been captured in the available data, the combination of a newly created domain, low‑trust SSL, zero trust score, and multiple independent detections strongly suggests an active crypto‑draining operation. Defensive teams should continue to block the domain at perimeter defenses, monitor DNS queries for the 102.218.215.37 address, and add the domain to internal threat‑intel feeds. Given the elevated risk rating, organizations handling cryptocurrency transactions should treat any communications referencing this domain as malicious and enforce strict verification controls for any web‑based crypto interactions.