claim[.]sentietn[.]com

Analysis on claim.sentietn.com shows the domain was registered on 21 February 2026 through REALTIME REGISTER B.V. The site is currently taken offline, but historical DNS records indicate it resolved to the Cloudflare address 172.67.131.89, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. The domain uses Cloudflare’s authoritative name servers bob.ns.cloudflare.com and nucum.ns.cloudflare.com, and no SSL/TLS certificate was observed, meaning HTTPS connections would be unencrypted or unsupported. The page title returned from the site was “Sentient Labs”, which does not directly reference the targeted brand; the intelligence tags the campaign as a wallet/seed phishing operation aimed at an unspecified “across” audience. Gridinsoft assigned a trust score of 0 out of 100, indicating a high likelihood of malicious intent.

VirusTotal scans reported that three of ninety‑three security vendors flagged the domain, confirming that at least a minority of AV engines consider it suspicious. The domain appears on two public blocklists, PhishDestroy and ScamSniffer, further corroborating its abusive nature. Because the site is offline, active payload delivery cannot be verified, and the exact phishing page content remains unknown.

Defenders should continue to block the domain at the DNS and proxy layers, monitor for any re‑registration attempts, and consider adding the associated IP address to threat‑intel feeds. Additional investigation of the Cloudflare‑hosted IP may reveal other malicious assets sharing the same infrastructure. Until the domain reappears, analysts should treat claim.sentietn.com as a confirmed wallet/seed phishing indicator and apply appropriate mitigations.