claims-fscs[.]net

The domain claims-fscs.net was registered on February 21, 2026 and immediately received a Gridinsoft trust score of 0 out of 100, indicating a lack of credibility. It is currently listed on a single security blocklist and has been blocked by PhishDestroy. The site does not present an SSL certificate and returns an HTTP 302 redirect, suggesting an attempt to move visitors to a secondary location without providing encrypted communications.

Infrastructure analysis reveals that the domain resolves to IP address 199.191.50.11, which is owned by AS40034 Confluence Networks Inc and geolocated in the United States. The authoritative name servers are dns1.registrar-servers.com and dns2.registrar-servers.com, both of which are typical of generic registrar services. Registration was performed through NameCheap, Inc., a widely used domain registrar, and the domain remains active as of the report date.

Threat profiling classifies the site as a crypto_drainer, a variant of cryptocurrency scams that seeks to exfiltrate digital assets from unsuspecting victims. VirusTotal reports that one out of ninety‑five security vendors flagged the domain, reinforcing the suspicion raised by the zero trust score and the blocklist entry. The high risk level assigned to the domain reflects its active status, the presence of a redirection mechanism, and the lack of any legitimate security controls such as TLS.

Defenders should prioritize immediate containment of claims-fscs.net by adding it to network firewalls, DNS filtering, and endpoint protection policies. Monitoring of the associated IP 199.191.50.11 is advised to detect any lateral movement or command‑and‑control traffic that may originate from the same host. Given the domain’s registrar and name server configuration, threat‑intelligence feeds should be updated to include these infrastructure elements, and any future resolution of similar registrar‑based domains should be scrutinized for comparable redirection behavior.