claimsubmits-x[.]com

Analysis indicates that claimsubmits-x.com was registered on 23 February 2026 through Hostinger Operations, UAB and immediately pointed to the IP address 84.32.84.32, which is announced by AS47583 Hostinger International Limited and geolocated to Lithuania. The domain resolves to a parking service using the nameservers ns1.dns-parking.com and ns2.dns-parking.com and does not present an SSL certificate, resulting in plain‑HTTP connections only. The sole visible page title is “Parked Domain name on Hostinger DNS system”, confirming that the site is currently serving a generic parking page rather than active malicious content. Nevertheless, the domain has been classified as a crypto‑drainer scam and is listed on three security blocklists.

It has been actively blocked by PhishDestroy, MetaMask, and SEAL, and one of ninety‑three VirusTotal scanners flagged the domain as malicious. The current operational status is reported as offline, suggesting that any active payload has been taken down or the infrastructure has been disabled. Evidence gaps remain regarding the specific phishing or draining mechanisms, as no malware samples, URLs, or transaction identifiers have been disclosed.

The lack of an SSL certificate prevents verification of certificate‑based impersonation, and the parked page provides no direct indication of the intended victim‑interaction flow. Defenders should continue to monitor the domain for any re‑activation, enforce blocklist entries across DNS filtering, web proxies, and endpoint protection, and consider adding the associated IP address 84.32.84.32 to network‑level deny lists. Additional investigation of the hosting provider’s abuse channels may yield further insight if the domain resurfaces.