theoriqai-claim[.]com

The domain theoriqai-claim.com has been identified as a crypto drainer, a type of threat designed to steal cryptocurrency from unsuspecting users. Currently, the domain is offline, which suggests it may have been taken down or is temporarily inactive. This domain was registered on July 02, 2025, through Key-Systems GmbH, and its SSL certificate is issued by Google Trust Services / WE1. The page title observed was "Default Web Site Page," indicating a generic or placeholder site.

According to threat intelligence data, the domain is flagged by 4 out of 95 VirusTotal security vendors, and it appears on 3 security blocklists. It resolves to IP address 172.67.137.90. The relatively low number of vendor flags does not diminish the risk, as crypto drainers often evade detection until they are actively used in attacks. The domain's registration with a European registrar and its SSL certificate from a trusted provider are common tactics to appear legitimate.

Given the elevated risk level and the specific threat type, it is strongly recommended to block all traffic to theoriqai-claim.com and any related subdomains. Users should be educated about crypto drainer schemes and advised to verify URLs carefully before connecting wallets or entering private keys. Organizations should add this domain to their blocklists and monitor for similar domains that may emerge. Continuous monitoring is advised, as the domain could become active again under a different IP or registrar.