migrate-fun-claim[.]com

Analysis of migrate-fun-claim.com shows a newly registered (05‑May‑2026) site hosted on Netlify and protected by HSTS. The domain resolves to 75.2.60.5, an IP owned by AWS Global Accelerator located in the United States. TLS is provided by Let’s Encrypt (E8), and the HTTP response code is 200. Nameservers are dns1.registrar-servers.com and dns2.registrar-servers.com, with registration through NameCheap, Inc. The site is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal reports nine of ninety‑one scanners flagging the domain, and Gridinsoft assigns a trust score of 0 / 100. The page title “Migrate Fun” and the classification as a crypto drainer indicate the domain is used to illicitly request cryptocurrency transfers, although the exact payload or user‑interaction flow has not been observed. Infrastructure evidence alone – recent registration, use of a CDN‑enabled hosting service, low trust scores, and multiple blocklist entries – is consistent with high‑risk crypto‑draining activity. Defenders should block network traffic to the resolved IP, deny DNS resolution for the domain, and monitor for related indicators such as wallet address requests originating from this host. Continuous re‑evaluation is advised as additional content analysis becomes available.