claims-skatechain[.]org

On 24 July 2026 analysts observed the domain claims-skatechain.org being served from the Cloudflare edge address 104.21.12.59, which belongs to AS13335 (Cloudflare, Inc.) in the United States. The domain was registered on 8 June 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and uses the Cloudflare authoritative nameservers dax.ns.cloudflare.com and mary.ns.cloudflare.com. No TLS certificate is presented, and the site returns a generic page title “Just a moment…”. VirusTotal reports that the host was scanned by 95 AV engines without a detection, but the absence of a flag does not imply safety.

The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy feed. Gridinsoft assigns a trust score of 0 / 100, reinforcing the low‑reputation assessment. The only publicly disclosed activity is the classification as a “Crypto Scam” and, more specifically, a crypto‑drainer operation, suggesting attempts to illicitly redirect cryptocurrency transactions.

Because the site is currently offline, live content cannot be examined, leaving the exact lure, payload, or credential‑harvesting mechanism unknown. Defenders should continue to block the domain at perimeter filters, monitor the associated IP address for any re‑use, and add the host to internal blacklists. Threat‑intel teams should watch for future registrations that reuse the same registrar or nameserver pattern, and consider sharing indicators of compromise with upstream feeds.