claim-pudgy[.]xyz

Analysis of claim-pudgy.xyz shows a clear infrastructure profile consistent with a crypto‑drainer operation. The domain was registered on February 21, 2026 and resolves to the IPv6 address 2a06:98c1:3120::3, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. The site presented the page title "Et øjeblik ..." and carried an SSL certificate labeled WE1, indicating the use of HTTPS despite the low trust rating. Gridinsoft assigned a trust score of 0 out of 100, reflecting extreme suspicion.

The domain appears on one security blocklist and is actively blocked by PhishDestroy, reinforcing its malicious classification. AlienVault OTX references the domain in a single threat‑intelligence pulse, and VirusTotal reported that 5 of 93 scanning engines flagged the domain as malicious, aligning with the observed crypto‑scam designation. Current monitoring indicates the site is offline, but the infrastructure components remain active and could be re‑used.

Defenders should immediately add claim-pudgy.xyz to network deny lists, enforce DNS filtering, and consider sinkholing the associated IPv6 address. Ongoing surveillance of Cloudflare‑hosted assets is advised, as the provider may be leveraged for rapid content redeployment. The limited public evidence—page title, registration data, SSL details, and detection counts—supports a high confidence verdict that claim-pudgy.xyz was employed as a crypto drainer, and its removal from any legitimate traffic paths is warranted.