claim-brevis.network
Security analysis of claim-brevis.network covers observed phishing indicators, infrastructure evidence, current status, and defensive guidance.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
Analysis of claim-brevis.network shows an active crypto‑drainer operation. The domain was registered on 11 March 2026 through NiceNIC International Group Co., Limited and is hosted behind Cloudflare’s network (ASN 13335). DNS resolution points to 172.67.177.62, an address owned by Cloudflare and located in the United States. The site presents an HTTP 403 response and the page title returned is “Just a moment…”, which is typical of Cloudflare’s challenge page rather than a legitimate service.
TLS is provided by Google Trust Services under the WE1 certificate, indicating a valid certificate chain despite the malicious intent. VirusTotal analysis records 2 of 94 scanning engines flagging the domain, confirming that at least a small subset of security products have identified it as malicious. The domain appears on one external security blocklist and has been added to PhishDestroy’s deny list, reinforcing the classification as a crypto‑related scam. Detected technologies include Cloudflare Browser Insights, Cloudflare, and HTTP/3, all consistent with the underlying CDN.
No additional content or phishing pages have been captured, so the precise delivery mechanism remains unknown, but the presence of a challenge page suggests the operators are leveraging Cloudflare’s protection to hide the final payload. Defenders should block the domain at the DNS and proxy layers, monitor outbound connections to the associated IP address, and ensure that any client‑side scripts that might redirect to cryptocurrency‑draining wallets are intercepted. Continuous re‑scanning is advised, as the low detection count indicates that many scanners have not yet flagged the site, and the threat may evolve to employ more sophisticated delivery vectors.
网络安全情报 Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | claim-brevis.network |
malicious | Sinkholed |
Forensic History & Detection Timeline
-
Domain Status Transition Aug 5, 2026 · 18:32 UTCDomain state transitioned from alive to dead.
威胁响应 Pipeline
公共封禁名单状态
Evasion analysis
Cloaking & traffic-distribution check
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
- Last cloaking scan
- Server header seen by scanner
cloudflare
Scanner note: cloudflare_challenge: raw=cf_challenge; http=403; via=https_proxy; server=cloudflare
已保存的截图 · 3 sources
域名情报
技术详情DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-09-20 02:39:31 UTC
技术 · 3 identified
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of claim-brevis.network · checked Mar 11, 2026
社区报告
由 1 名社区成员报告;首次发现于 2026年3月11日
- 已存储报告
- 1
- 已报告的唯一 URL
- 1
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。