claim[.]edgexfoundation[.]click

The domain claim.edgexfoundation.click has been identified as a high-risk crypto drainer, currently active as of July 12, 2026. It was created on April 4, 2026, and has been flagged by 6 out of 95 security vendors on VirusTotal, indicating a significant level of malicious activity associated with this domain. The domain is registered with Dynadot, LLC and resolves to the IP address 172.67.181.217. Additionally, it has a trust score of 0 out of 100 on Gridinsoft, further underscoring its malicious reputation. This domain is also actively blocked by PhishDestroy and appears on at least one security blocklist, which signifies its recognition within the cybersecurity community as a potential threat.

The presence of the page title "FASTPANEL" suggests a possible attempt to mimic legitimate services or platforms, which is a common tactic used by malicious actors to deceive users. The use of SSL certificate issued by Let's Encrypt does not necessarily confer safety, as many malicious domains utilize SSL to appear legitimate. The infrastructure analysis indicates that the domain remains active, and the risk associated with it remains high, prompting immediate attention from defenders.

Defenders should implement proactive measures to block access to this domain at the network level, utilizing threat intelligence feeds and updating firewall rules to prevent any potential interactions with this domain. Users should be educated about the risks of entering personal or financial information on websites that resemble legitimate services but are hosted on suspected malicious domains like claim.edgexfoundation.click. Continuous monitoring and analysis of traffic associated with this domain will be essential in mitigating any potential damage to users and organizations.