claim-yi[.]netlify[.]app

claim-yi.netlify.app is a tenant hostname on Netlify, not a separately registered domain. PhishDestroy first observed the hostname on Aug 13, 2026. The hostname uses “claim,” a pattern consistent with a reward-claim lure; no target brand is confirmed from stored content. Current evidence score: 100/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 10 detections among 91 engines: alphaMountain.ai, BitDefender, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Lionic, Phishtank, Sophos, VIPRE on Aug 14, 2026 at 06:53 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 14, 2026 at 18:20 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Aug 14, 2026 at 13:58 UTC. URLScan completed without a malicious verdict (score 0) on Aug 13, 2026 at 23:09 UTC.

The collector marked the hostname reachable on Aug 13, 2026 at 17:57 UTC, but did not retain the HTTP response code. Netlify is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 63.176.8.218 on AS16509 (AMAZON-02 - Amazon.com, Inc., US). The IP and ASN identify shared Netlify infrastructure, not the tenant operator. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. The platform TLS certificate was issued by DigiCert Inc with validity through Mar 19, 2027; checked Aug 13, 2026 at 19:02 UTC.

The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.