claim-yala[.]icu

This domain claim-yala.icu is currently flagged as a high‑risk crypto‑drainer infrastructure. The domain was registered on 21 February 2026 through NameSilo, LLC and is hosted behind Cloudflare (AS13335) with the IP address 172.67.173.193 located in the United States. DNS resolution uses the Cloudflare name servers salvador.ns.cloudflare.com and heather.ns.cloudflare.com. HTTP requests receive a 403 status code and the TLS certificate is issued by Google Trust Services under the WE1 profile, indicating a valid HTTPS surface. The site presents the page title “Just a moment…”, but no further content has been disclosed. Passive monitoring shows the domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal has recorded three detections out of ninety‑three scanners, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. Detected technologies include Cloudflare Browser Insights and HTTP/3, typical of fast‑forwarded traffic. The classification as a crypto scam aligns with the observed “crypto_drainer” tag. While the exact payload and victim interaction remain unknown, the combination of blocklist presence, detections, and low trust score warrants immediate containment. Defenders should block DNS resolution and HTTP/HTTPS traffic to 172.67.173.193, monitor for related C2 patterns, and update intrusion‑prevention signatures accordingly.