claims-blackbullsol[.]app

Analysis of claims-blackbullsol.app shows that the domain was registered on 24 July 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. The authoritative name servers are coco.bunny.net and kiki.bunny.net, and the domain resolves to the IPv4 address 62.60.226.88. Reputation services have flagged the domain as a crypto drainer: two of ninety‑one VirusTotal scanners reported malicious activity, and the domain is listed on a single public security blocklist.

PhishDestroy has also added the domain to its blocklist, indicating that it is being actively mitigated by at least one anti‑phishing service. No additional intelligence such as SSL certificate details, HTTP response codes, or page title has been disclosed, so the exact payload or delivery mechanism remains unknown. The limited detection footprint suggests a recent deployment, consistent with the creation date of the domain only one day prior to the report.

Defenders should treat the domain as high‑risk: network perimeter controls should block DNS resolution to 62.60.226.88, firewall rules should deny outbound connections to the host, and endpoint security policies should include the domain in URL filtering lists. Continuous monitoring of the IP reputation and periodic rescans with VirusTotal or similar platforms are recommended to capture any evolution in the malicious profile. Organizations that handle cryptocurrency transactions should be especially vigilant for attempts to redirect users to this domain, as the threat classification indicates attempts to exfiltrate crypto assets.