claim614coin[.]com

The domain claim614coin.com was registered on 21 February 2026 and is presently taken offline. Infrastructure analysis shows that the domain resolved to the IPv4 address 198.12.80.250, which is assigned to AS36352 operated by HostPapa in the United States. The SSL certificate for the site was rated R10, indicating a low trust score. The page title returned by the server was “Claim Your Coins – Travel,” which does not correspond to any legitimate Google service.

The domain is classified as a brand‑impersonation campaign targeting Google, and the associated scam type is listed as a tech‑support scam. VirusTotal scans recorded nine positive detections out of ninety‑three submitted security vendors, demonstrating that multiple AV engines have flagged the site as malicious. The domain appears on one public security blocklist and has been actively blocked by the PhishDestroy sinkhole, confirming that at least one defensive feed is already distributing its indicator. Because the site is currently offline, live content cannot be inspected, and the exact landing page behavior remains unverified.

However, the combination of a brand‑impersonation page title, a low‑trust SSL rating, hosting on a consumer‑grade ISP, and multiple vendor detections provide strong evidence of malicious intent. Defenders should continue to block the IP address 198.12.80.250 at network perimeter devices, add claim614coin.com to URL filtering and email security policies, and monitor for any resurgence of the domain or similar patterns that reuse the “claim‑your‑coins” phrasing. Incident response teams should also treat any unsolicited communications referencing “claim your coins” as potentially tied to the same tech‑support scam infrastructure, and advise users not to engage with such messages. Ongoing observation of the HostPapa AS36352 range for new domains that mimic Google branding is recommended.