claimlight[.]xyz

This domain is flagged as a brand impersonation threat targeting the HTX brand. claimlight.xyz is currently active and under investigation. No specific drainer kit has been identified at this time, but the impersonation of a major cryptocurrency exchange indicates a high risk of credential theft or financial fraud.

Technical indicators for claimlight.xyz include a VirusTotal score of 0/95, meaning no security vendors have flagged it as malicious. The domain was registered on June 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 172.67.219.45 and uses an SSL certificate issued by Google Trust Services. Google Safe Browsing status is unknown from the provided data, and no blocklist count is available. The low detection rate suggests the domain is relatively new or designed to evade initial security screening.

Current status is active, with the risk level under investigation. Recommended response actions include immediate blocking of the domain at network and email gateways, issuing a takedown request to the registrar (NICENIC INTERNATIONAL GROUP CO., LIMITED), and notifying the HTX security team. Remaining risk includes potential user compromise if the domain is accessed before blocking, as the 0/95 VT score means it may bypass automated filters. Users should avoid visiting claimlight.xyz and rely on official HTX communication channels.