# claim-warsonusd1.com — MALICIOUS

> claim-warsonusd1.com is under investigation for crypto draining risks. Avoid interaction and stay alert to protect your digital assets.

## Summary
PhishDestroy has identified claim-warsonusd1.com as a suspicious domain linked to crypto draining activity, which involves covertly stealing cryptocurrency from users. Although this domain currently has no detections on VirusTotal, its recent creation date and registrar details raise caution. Users should be aware that such sites often aim to trick individuals into revealing private keys or wallet credentials.

This phishing scheme typically operates by masquerading as a legitimate service or reward platform to lure victims. Once engaged, the site attempts to capture sensitive information or inject malware that drains crypto wallets. Since the domain is actively monitored and under investigation, its intent remains concerning despite the absence of immediate technical flags.

If you have visited claim-warsonusd1.com, it is crucial to avoid entering any personal or wallet information. Change any related passwords, enable two-factor authentication on your crypto accounts, and monitor your wallets for unauthorized transactions. Reporting the site and staying informed through trusted security sources like PhishDestroy can help mitigate potential harm.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: $WAR - War on USD | Trade USD1 Pair | Join the Resistance

## Domain Intelligence
- Registered: 2026-03-11 21:31:51
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: CN
- IP: 104.21.75.184
- Nameservers: ara.ns.cloudflare.com burt.ns.cloudflare.com

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/0Vqt2pH9/1420c98295b5.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/f967e08b-5893-4ccf-b38a-5d83976ce4b6
- PhishDestroy: https://phishdestroy.io/domain/claim-warsonusd1.com/
- LLM endpoint: https://phishdestroy.io/domain/claim-warsonusd1.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/claim-warsonusd1.com/
Last updated: 2026-03-19