claimthecoin[.]com

The domain claimthecoin.com was created on 30 December 2025 and is registered through Hosting Concepts B.V. d/b/a Registrar.eu. It resolves to the IPv4 address 84.32.84.215, which is hosted in Lithuania and belongs to AS47583 (Hostinger International Limited). The authoritative nameservers listed are ns1.dns-suspended.com and ns2.dns-suspended.com, a pair often associated with domains that have been suspended or are in a transitional state. The site presents the page title "Wallet Auth Validator – | Connect Wallet," and the intelligence indicates it impersonates the brand argent, classifying the activity as a crypto‑related scam.

The SSL certificate is rated R13, suggesting a low‑trust certificate. Security‑vendor analysis on VirusTotal shows 14 of 93 scanners flagging the domain, and the Gridinsoft trust score is 0 / 100, reinforcing the malicious assessment. The domain appears on four security blocklists and is explicitly blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. AlienVault OTX has indexed the domain in one threat‑intel pulse.

As of the report date (23 July 2026) the domain is taken offline, but the observed infrastructure—hosting provider, registrar, name‑server pattern, and IP prefix—remains reusable for future campaigns. Defenders should add claimthecoin.com to DNS‑based blocklists, monitor the associated IP range (84.32.84.0/24) and the registrar for new registrations, and incorporate the observed page‑title string into URL‑filtering rules. Continuous threat‑intel feeds should be consulted for any re‑appearance of similar domains targeting argent or employing comparable wallet‑authentication phrasing.