energywebclaim[.]com

The domain energywebclaim.com was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is presently taken offline. DNS resolution points to the IP address 172.67.215.234, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain employs Cloudflare services, as evidenced by the presence of Cloudflare Browser Insights, HTTP/3 support, and the authoritative nameservers kehlani.ns.cloudflare.com and seamus.ns.cloudflare.com. The SSL certificate presented by the site is issued by Google Trust Services under the WE1 designation, indicating a legitimate certificate chain but offering no assurance of content safety.

The only observed page title is "Just a moment...", a generic placeholder that provides no insight into the page's purpose. Intelligence categorizes the activity as a crypto scam, specifically a crypto drainer, and the domain appears on a single security blocklist, where it has been flagged by PhishDestroy. VirusTotal analysis shows that 2 of 95 security vendors have flagged the domain, reinforcing the suspicion that it is being used for malicious financial extraction.

While the offline status limits immediate observation, the combination of recent registration, Cloudflare hosting, a legitimate SSL certificate, and the modest vendor detection suggests an opportunistic campaign aimed at luring cryptocurrency users. Defenders should continue to block the domain at perimeter controls, monitor for any resurgence of activity, and update detection signatures to include the identified IP address and nameserver pair. Additional scrutiny of any future DNS changes or certificate re‑issuance is advised, as attackers may reactivate the infrastructure under a different guise.