claimschecker[.]live

The domain claimschecker.live has been identified as a crypto_drainer, a specialized threat designed to siphon cryptocurrency assets from victims under false pretenses. Analysis indicates the domain is currently offline, though prior activity impersonated CLAIMS EAST LIMITED, a purported fund recovery service. The page title, 'ClaimsChecker.live — Recover Your Funds | CLAIMS EAST LIMITED,' suggests a targeted campaign aimed at individuals seeking to reclaim lost or stolen digital assets. Infrastructure analysis reveals the domain was registered on June 17, 2026, through NameCheap, Inc. It resolves to the IP address 185.158.133.1 and is associated with an SSL certificate issued by Google Trust Services. Detection metrics indicate the domain was flagged by 3 of 95 security vendors on VirusTotal, while appearing on a single security blocklist, specifically PhishDestroy. These indicators, combined with the domain's recent creation and low detection count, suggest an attempt to evade automated security systems during its operational phase. Current assessment classifies this domain as an elevated-risk threat due to its targeted nature and direct financial impact. While the domain is presently offline, residual risk remains for users who may have interacted with it during its active period. Organizations and individuals are advised to monitor network logs for connections to 185.158.133.1 and block the domain at the DNS level. Cryptocurrency users should verify the legitimacy of any fund recovery service through official channels and avoid engaging with unsolicited offers, particularly those promising asset restitution in exchange for wallet access or private key disclosure.