claim[.]manyushiba[.]dog

Analysis of claim.manyushiba.dog shows a newly registered domain (created February 21, 2026) that is actively serving content and returning HTTP 200 responses despite the page title indicating a 521 Web server down error. The domain resolves to IP 172.67.183.41, which is part of the Cloudflare network hosted in the United States. DNS is delegated to Cloudflare nameservers (brenna.ns.cloudflare.com and hassan.ns.cloudflare.com) and the site presents an SSL certificate issued by Google Trust Services. A Gridinsoft trust score of 0 / 100 and placement on one security blocklist, specifically PhishDestroy, further highlight malicious intent. VirusTotal records a single detection out of 93 scanners, and the intelligence tags the site as a crypto‑drainer scam with a high‑risk rating. The technical footprint suggests an attacker leveraging Cloudflare for anonymity while directing victims to a site that likely attempts to steal cryptocurrency assets. Defenders should treat the domain as hostile: enforce DNS filtering to block claim.manyushiba.dog, monitor outbound connections to the associated IP, and incorporate the domain into endpoint and network threat‑intel feeds. Because the visible page content is limited to a server‑down notice, additional payload analysis is required to confirm the exact draining mechanism, but the existing indicators warrant immediate prevention and continuous observation.