lineaclaim[.]com

lineaclaim.com is a phishing domain engaged in brand impersonation, specifically targeting the cryptocurrency brand Linea. The site posed a threat by mimicking Linea to deceive users into providing sensitive information or credentials, though no drainer kit was identified. As of the current report, the domain has been taken offline, indicating it is no longer active and reducing immediate risk to users.

Technical indicators for lineaclaim.com include detection by 2 of 95 VirusTotal vendors, including ADMINUSLabs and Fortinet, and it appears on 1 security blocklist, specifically PhishDestroy. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on September 10, 2025, and resolves to IP address 104.21.3.207, located in the US under AS13395 Cloudflare, Inc. No SSL certificate was issued for the site, and the page title observed was 'Just a moment...' Nameservers were razvan.ns.cloudflare.com and sierra.ns.cloudflare.com. Google Safe Browsing did not flag the domain.

Users who may have interacted with lineaclaim.com should take immediate safety steps. Since the threat involves cryptocurrency brand impersonation, revoke any token approvals granted to the domain and move funds to a new, secure wallet. Change passwords for any accounts potentially compromised, enable two-factor authentication, and monitor for fraudulent activity. Report the domain to relevant authorities or security platforms to aid in takedown efforts.