claims-openverse[.]xyz

The domain claims-openverse.xyz, registered with NiceNIC International Group Co., Limited, is identified as a generic phishing operation with a high threat score of 85/100. It has been flagged as malicious by 5 out of 95 security vendors, including recognizable names like Forcepoint ThreatSeeker and Fortinet, and is listed on 2 public blocklists. Google Safe Browsing has not flagged this domain, indicating it may still be operational despite its malicious detection.

The domain was created on October 9, 2025, and first detected on October 17, 2025. It is hosted on the IP address 37.16.75.129. The lack of brand impersonation suggests a broader phishing strategy rather than targeting a specific entity, which may increase its potential victim pool.

Given the high threat score and confirmed malicious activity, block the domain at the perimeter and submit it to the registrar's abuse desk for further action.