claimext.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of claimext.com
claimext.com appears to present itself as a cryptocurrency token-claim portal for an entity branded as "Extended." Based on the page title, metadata, and screenshot, the site invites visitors to connect a crypto wallet to check eligibility for a claimed $EXT token allocation and complete a token claim process. The page includes typical crypto-campaign elements such as allocation totals, claim dates, wallet prompts, and a leaderboard-style activity panel.
The domain name combines the words "claim" and "ext," which aligns with the token-claim theme shown on the page. However, the site is hosted on a separate domain from the referenced application domain visible in its outbound links, which may be relevant when assessing authenticity. Based on available data, the operator is not clearly identified through the homepage details provided in this scan, and the site appears to target cryptocurrency users seeking to connect wallets and interact with token-distribution features.
Safety Assessment for claimext.com
This website shows multiple risk indicators at the time of this scan. It was flagged by 13 out of 91 security engines, with several classifying it as phishing, malware, or fraud-related content. Multiple web-classification providers also categorized the domain in phishing-related terms, while the page itself asks users to connect a cryptocurrency wallet to claim tokens. That combination can be consistent with wallet-draining or credential-harvesting schemes, especially when paired with a newly registered domain and no established traffic ranking.
Additional context increases caution. The domain was registered the same day it was scanned, which is a common pattern for short-lived phishing campaigns and crypto-themed impersonation pages. Although major content-malice databases listed in this scan did not detect threats at the time of review, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker but still relevant signal. A malware scan also produced a generic suspicious result on one scanned page, though that finding alone would be lower confidence without broader corroboration.
Based on these findings, this website may pose potential risks to visitors. Extreme caution would be advisable before connecting a wallet, signing transactions, or entering sensitive information.
Technical Description
The site uses a valid SSL certificate issued by a mainstream certificate authority, with hosting and reverse-proxy infrastructure appearing to be provided through Cloudflare. The server IP resolves to 172.67.131.174, and the nameservers also point to Cloudflare-managed DNS. SSL presence helps encrypt traffic in transit, but it does not by itself verify that the underlying service is trustworthy.
From a domain-security perspective, the registration is extremely recent, DNSSEC is unsigned, and the site appears to rely on a simple cloud-hosted setup with limited historical reputation. The scan also noted one generic suspicious page finding and a DNS-based mail-reputation listing on the IP. Based on available technical data, the strongest concerns are the domain's age and the broader phishing-related detection pattern rather than any advanced server-side misconfiguration.
Share your experience with this website. Was it safe? Did you encounter any issues?