claim[.]ublives[.]shop

The domain claim.ublives.shop was a cryptocurrency phishing site designed to function as a crypto drainer, a type of scam that automatically siphons funds from victims' wallets. No legitimate brand or known drainer kit was impersonated. As of the latest verification, claim.ublives.shop has been taken offline, though its prior activity poses a continued risk to users who interacted with it.

Technical indicators confirm the elevated threat level of claim.ublives.shop. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned a trust score of 0/100. It appeared on 1 security blocklist, PhishDestroy, while Google Safe Browsing did not flag it. Registered through NameCheap, Inc. on August 11, 2025, the domain resolved to the IPv6 address 2a05:d014:58f:6200::258, hosted on Amazon.com, Inc.'s AS16509 in Germany. The SSL certificate was issued by Let's Encrypt (E8), and the observed page title was 'Win a Discount!'. Detected technologies included Netlify and HSTS, with nameservers dns1.registrar-servers.com and dns2.registrar-servers.com.

Users who connected a wallet to claim.ublives.shop should immediately revoke all token approvals using a tool such as Revoke.cash or Etherscan's token approval checker. Funds should be transferred to a new, unused wallet to prevent further unauthorized transactions. If credentials or personal information were entered, passwords should be changed, and two-factor authentication enabled on all accounts. The domain can be reported to Google Safe Browsing, PhishTank, or the registrar, NameCheap, for further investigation and takedown.