claim-yom[.]com

Analysis of claim-yom.com shows a newly registered domain created on June 03, 2026 and hosted behind Cloudflare infrastructure (IP 172.67.148.125, located in CA). The site presents a valid SSL certificate issued by Google Trust Services under the WE1 profile, indicating HTTPS availability. HTTP requests return a 301 redirect, and the page title returned by the server is "YOM App". The domain is listed on three security blocklists and is specifically blocked by PhishDestroy, MetaMask, and SEAL, reflecting active mitigation by multiple defenders. Threat intelligence sources cite the domain in four AlienVault OTX pulses and five of ninety‑one VirusTotal scanners have flagged it, reinforcing the perception of malicious intent. The classified threat type is a crypto drainer, meaning it likely attempts to trick users into transferring cryptocurrency to attacker‑controlled wallets. While the exact page content has not been publicly dissected, the convergence of registration timing, blocklist presence, certificate details, and detection history suggests a high‑risk profile. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the host, and consider isolating any endpoint activity that attempts to resolve or access claim-yom.com. Ongoing observation is recommended to capture any future changes in payload or redirection behavior.