claws[.]meme

This domain, claws.meme, is identified as a crypto wallet drainer phishing site designed to steal cryptocurrency credentials and execute unauthorized transactions. The site employs client-side scripting frameworks, including Vue.js and Nuxt.js, to simulate legitimate wallet interfaces, while backend components such as Node.js facilitate real-time transaction manipulation. The use of Cloudflare and HTTP/3 suggests an attempt to obscure infrastructure and evade detection through encrypted traffic and low-latency routing. Analysis indicates the domain was registered on February 25, 2026, through Porkbun LLC, a registrar frequently associated with short-lived phishing campaigns. It resolves to the IP address 188.114.96.3 and is currently flagged by 3 out of 95 security vendors on VirusTotal. The domain appears on three independent security blocklists and has been proactively blocked by multiple wallet security extensions. The page title, 'claws meme,' lacks brand association, a common tactic to avoid automated brand-monitoring tools while targeting users through social engineering. Users who interacted with claws.meme should immediately revoke any connected wallet permissions and transfer assets to a new wallet address. All devices used to access the site should undergo a full malware scan using updated security tools. It is recommended to review transaction histories for unauthorized withdrawals and report the incident to relevant blockchain security teams. Future vigilance is advised, particularly with domains mimicking internet culture or meme-related content, as these are increasingly used to lower user defenses.