claimmemelesstokensol[.]com

Analysis of the domain claimmemelesstokensol.com indicates it was actively used for crypto-draining operations prior to being taken offline on or before July 24, 2026. The domain was registered on September 9, 2025, through ERANET INTERNATIONAL LIMITED and is associated with a Cloudflare-hosted infrastructure, resolving to the IP address 104.21.48.1 (AS13335, United States). No SSL certificate was detected, and the domain currently returns a placeholder page with the title 'Nur einen Moment…', suggesting it may have been part of a larger, automated redirection or loading sequence typical of crypto scams. Infrastructure analysis reveals the domain was flagged by at least one security blocklist (PhishDestroy) and received a trust score of 0/100 from Gridinsoft.

Two of 95 security vendors on VirusTotal flagged the domain as malicious, consistent with its classification as a crypto scam. The use of Cloudflare nameservers (lars.ns.cloudflare.com and nancy.ns.cloudflare.com) is common among threat actors to obscure backend hosting and evade takedowns, though it does not inherently indicate malicious activity. Defenders should treat this domain as part of a crypto-draining campaign, particularly given its offline status and prior classification.

While the exact content and mechanics of the scam are not fully analyzed, the combination of a low trust score, blocklist inclusion, and scam-type labeling suggests it was designed to interact with cryptocurrency wallets or platforms. Network-level blocking of the IP 104.21.48.1 and monitoring for related domains registered under the same registrar or hosting provider may help mitigate residual risk. No further active connections or live samples were observed at the time of this report, but historical logs should be reviewed for interactions with this domain or its resolved IP.