claims-etherexfi[.]app

The domain claims-etherexfi.app is identified as a crypto_drainer, impersonating the legitimate Etherex Exchange. The domain was registered through Cloudflare, Inc. and is associated with a malicious drainer kit designed to siphon cryptocurrency from unsuspecting users.

Infrastructure analysis reveals that claims-etherexfi.app resolves to the IP address 188.114.97.3. The domain has a VirusTotal score of 7/95, indicating that 7 security vendors out of 95 have flagged it as malicious. It is registered through Cloudflare, Inc., and was created on an unknown date. The domain appears on 4 security blocklists and has a Gridinsoft trust score of 0/100, reflecting a complete lack of trustworthiness.

Currently, the domain is offline, which may indicate that it has been taken down by security organizations or the registrar. Despite this, the domain remains a threat due to its presence on multiple blocklists and the potential for reactivation. Security teams are advised to monitor for any signs of the domain coming back online and to ensure that all network traffic is filtered to prevent any accidental access. The remaining risk is elevated, and users should be educated about the dangers of crypto_drainers and the importance of verifying the authenticity of websites before entering sensitive information.