claim-fetchai[.]icu

claim-fetchai.icu is flagged as a brand‑impersonation site targeting Google. The domain was registered on September 15 2025 through Spaceship, Inc. and resolves to the IP address 142.250.186.36, which belongs to AS15169 Google LLC in the United States. Despite sharing the same IP range as legitimate Google services, the host presents no TLS certificate, indicating that the site is served over plain HTTP only. The page title returned by the server is “Google”, matching the claimed brand target, and the domain is classified as a crypto‑scam in the intelligence feed. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy feed.

VirusTotal analysis shows that 2 of 95 security vendors have raised detections against the domain, reinforcing the suspicion of malicious intent. DNS resolution is handled by the Cloudflare nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of confidence in the host. The current operational status is offline, which may be a temporary takedown or a defensive sinkhole. Evidence gaps remain: no public safe‑browsing or Open Threat Exchange entries are observed, and no detailed payload or credential‑harvesting behavior has been captured.

Consequently, defenders cannot confirm the exact phishing or malware mechanisms employed beyond the generic crypto‑scam label. However, the combination of brand impersonation, lack of encryption, low trust score, and vendor detections warrants immediate defensive actions. Organizations should add claim-fetchai.icu to blocklists at the network perimeter, DNS resolvers, and endpoint security solutions. Monitoring for traffic to the associated IP address 142.250.186.36, even if it originates from legitimate Google services, is recommended to detect potential false‑positive or malicious reuse.