claim-reserve[.]com

This domain operates as a crypto drainer, a specialized threat designed to siphon digital assets from connected cryptocurrency wallets. Analysis indicates the site impersonates legitimate portfolio tracking services, presenting itself as 'ClaimReserve — Secure crypto portfolio tracking' to deceive users into authorizing malicious transactions. Once a victim connects their wallet, the drainer executes unauthorized transfers, often emptying balances before detection is possible.

Technical indicators confirm the domain's malicious nature. The domain claim-reserve.com was registered on May 28, 2026, through Name.com, Inc., an unusually future-dated creation that may suggest attempts to evade reputation-based filtering. It resolves to IP address 185.158.133.1 and is hosted behind Cloudflare (AS13335), a common obfuscation tactic. The domain appears on three security blocklists and is actively blocked by MetaMask and SEAL. VirusTotal reports 1 out of 95 security vendors flagging the domain, while its SSL certificate is issued by Google Trust Services (WE1), which does not mitigate the underlying threat.

Users who have visited claim-reserve.com or interacted with its content should immediately revoke any wallet authorizations granted to the site. Disconnect all connected wallets and transfer remaining assets to a new, secure wallet address. Monitor transaction histories for unauthorized activity and report the domain to relevant security platforms for further mitigation. Given the high-risk classification and active status, continued exposure to this domain poses significant financial risk.