claims-kiteai[.]foundation

The domain claims-kiteai.foundation was registered on November 5, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. Infrastructure analysis shows it used Cloudflare nameservers khloe.ns.cloudflare.com and ricardo.ns.cloudflare.com, resolving to the IPv6 address 2606:4700:3034::ac43:ab55 hosted in the United States under AS13335 Cloudflare, Inc. No TLS certificate was presented, indicating the site operated without HTTPS. The page title returned by the server was "Pieni hetki...", and the domain was classified as a crypto scam that impersonates the brand "foundation".

It appears on a single security blocklist, PhishDestroy, and received detections from six of ninety‑five VirusTotal scanners. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. Because the site is offline, active content cannot be examined, leaving the exact phishing payload or lure unknown.

Defenders should treat the domain as hostile: incorporate the domain and its resolving IP into network and email blocklists, monitor for any re‑registration or similar domains using the same registrar or Cloudflare infrastructure, and enforce strict outbound filtering for communications that reference the "foundation" brand. Continuous threat‑intel feeds should be consulted for any emergence of related indicators, and incident response teams should be prepared to investigate any user reports that reference this domain or its associated IP range.