claim-capx[.]live

The domain claim-capx.live is currently active and has been identified as a crypto drainer phishing site. It does not impersonate a specific brand nor does it use a known drainer kit, but it presents a significant risk to users by attempting to drain cryptocurrency wallets. The site is not safe to visit, and users should avoid interacting with it to prevent potential loss of digital assets.

Technical analysis shows that claim-capx.live was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on February 21, 2026. The domain resolves to IP address 104.21.79.202, hosted in the US under AS13335 (Cloudflare, Inc.), and uses SSL issued by Google Trust Services / WE1. The site is currently returning an HTTP 403 status and displays the page title 'Nur einen Moment…'. Detection rates include 2 of 95 security vendors on VirusTotal (ADMINUSLabs and Fortinet), and the domain is listed on one security blocklist (PhishDestroy). Google Safe Browsing has not flagged the domain. Technologies detected include HSTS, Cloudflare, and HTTP/3, with nameservers huxley.ns.cloudflare.com and pearl.ns.cloudflare.com.

Anyone who interacted with claim-capx.live or suspects exposure to a crypto drainer scam should immediately revoke any token approvals connected to their wallet and transfer funds to a new, secure wallet address. Monitoring for unauthorized transactions is recommended. Incidents involving claim-capx.live can be reported to relevant security blocklists and crypto wallet providers to mitigate further risk.