claim[.]ibizafinalboss[.]world

On 24 July 2026, technical analysis was performed on the domain claim.ibizafinalboss.world. The domain was registered on 21 February 2026 through Web Commerce Communications Limited and is served by Cloudflare’s DNS infrastructure, using the authoritative nameservers hasslo.ns.cloudflare.com and aisha.ns.cloudflare.com. DNS resolution points to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., and is geolocated in the United States. HTTPS is provided by a Google Trust Services certificate issued for the WE1 brand, indicating a valid TLS chain despite the malicious intent reported.

An HTTP request to the root returned status code 403, and the page title reported by the server is "IBIZA FINAL $BOSS", consistent with the listed scam type of a crypto scam, specifically a crypto drainer. Security telemetry shows that the domain appears on a single public blocklist and has been flagged by PhishDestroy. Reputation scoring from Gridinsoft assigns a zero out of one hundred, reflecting an extremely low trust rating. VirusTotal analysis shows that two of ninety‑five scanning engines flagged the domain, providing additional confirmation of malicious behavior.

The site is currently listed as offline, which limits immediate content inspection, and no further artifacts such as wallet addresses or malicious payloads have been observed. Given the combination of a recent registration, Cloudflare‑based hosting, a valid Google certificate, and the observed negative reputation signals, defenders should treat claim.ibizafinalboss.world as a confirmed crypto‑draining threat. Recommended actions include adding the domain and its resolving IP to network and DNS blocklists, monitoring for any re‑activation of the service, and correlating any inbound traffic to the IP with known malicious activity. Continuous observation of the associated Cloudflare nameservers is advised to detect potential migration to new IP ranges.