Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
birb-claim[.]com
“Birb Website”
Сводка доказательств
This domain, birb-claim.com, is identified as a crypto drainer, a type of malicious infrastructure designed to siphon cryptocurrency from connected digital wallets. Crypto drainers operate by tricking users into authorizing transactions or signing malicious smart contracts, which then transfer funds to attacker-controlled addresses without the victim’s knowledge. The threat is particularly insidious because it exploits legitimate wallet functionalities, often leaving users unaware until their assets are irretrievably lost. Analysis indicates this site was likely part of a broader campaign targeting individuals through phishing links, fake airdrops, or deceptive social media promotions, all aimed at luring victims into interacting with the malicious domain. Infrastructure analysis reveals multiple red flags confirming the domain’s malicious nature. The domain was registered on February 21, 2026, through Hello Internet Corp, a registrar frequently associated with high-risk or fraudulent domains. It resolves to the IP address 104.21.19.253 and is protected by Cloudflare, a common tactic to obscure the true hosting origin and evade takedowns. Security vendors have flagged the domain, with 4 out of 95 engines on VirusTotal detecting it as malicious. Additionally, the domain appears on five security blocklists, including those maintained by MetaMask, ScamSniffer, and SEAL, and is referenced in one threat intelligence pulse on AlienVault OTX. The page title, 'Birb Website,' is generic and lacks legitimacy, further indicating its fraudulent purpose. If you visited birb-claim.com or interacted with its content, immediate action is required to mitigate potential losses. First, disconnect any wallets connected to the site and revoke any suspicious smart contract approvals using a blockchain explorer or wallet management tool. Monitor your wallet for unauthorized transactions and transfer remaining assets to a new, secure wallet if compromise is suspected. Report the domain to relevant platforms, such as cryptocurrency exchanges or wallet providers, to aid in broader takedown efforts. Finally, scan your device for malware, as crypto drainers may deploy additional payloads to maintain persistence or exfiltrate sensitive data. Given the elevated risk level, users should remain vigilant for similar threats and verify the legitimacy of any cryptocurrency-related sites before interaction.
Снимок отправленных доказательств
- Отправлено
- Записи журнала
- 1
- ID дела
PD-20260130-232F2F- Заголовок сохранённой страницы
- Birb Website
- PDF-файл
- PDF с доказательствами
Правовое основание
Полный текст доказательств
Acceptable Use Policy (AUP): The domain birb-claim.com is engaged in phishing activities, which directly contravenes the AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The registrar reserves the right to suspend or terminate services for violations, and the operation of this domain constitutes a clear violation of the TOS due to its fraudulent nature.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and networks, which is applicable as phishing schemes often involve unauthorized access to sensitive information.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications, which is relevant given the deceptive practices associated with phishing.
Anti-Phishing Consumer Protection Act: This legislation aims to combat phishing by imposing penalties on those who engage in fraudulent online activities, further supporting the need for immediate action against this domain.
Regulatory Note: Failure to take appropriate action against birb-claim.com may expose your organization to potential liability under applicable laws and regulations. Immediate suspension of this domain is recommended to mitigate risks associated with non-compliance.
Data Coverage
Данные сетевой безопасности
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | birb-claim.com |
malicious | Sinkholed |
Процесс реагирования на угрозы
Проверка по блок-листам
10 внешних источников под наблюдением · снимок от 11.08.2026
9 внешних источников под наблюдением Совпадений нет
Хронология обнаружения
-
Статус домена
Доступен → Недоступен
-
Cloudflare Radar
Сканирование Cloudflare Radar сохранено · Открыть сканирование
-
Cloudflare Radar
Сканирование Cloudflare Radar сохранено · Открыть сканирование
-
VirusTotal
3 → 4
-
Статус домена
Недоступен → Доступен
Сохранённый снимок
Аналитика доменов
Технические деталиDNS, имена TLS и временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Анализ VirusTotal
Повлиял ли на вас этот сайт?
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.
Проверить любой домен
Анализ угроз с использованием сохраненного черного списка, WHOIS, DNS и общедоступных доказательств сканирования.
Сканировать сейчасСообщить о фишинге
Добавляйте подозрительные домены в нашу базу данных угроз — защищайте сообщество
СообщитьПоток оперативных данных об угрозах
Недавние сообщения о фишинге и наблюдаемые изменения доступности
ОтслеживатьБудьте в курсе событий, берегите себя
Отслеживайте актуальные угрозы или оспорьте эту запись, если считаете, что это ложное срабатывание