claim[.]kushoworld[.]com

Analysis of the domain claim.kushoworld.com indicates it is associated with an active crypto-draining scam, as classified in threat intelligence records. The domain was registered on March 17, 2022, through GoDaddy.com, LLC, and currently resolves to the IP address 66.33.60.130, which is hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The domain's nameservers are ns21.domaincontrol.com and ns22.domaincontrol.com, consistent with registrar-managed DNS configurations. At the time of this report, the domain returns an HTTP 200 status, confirming its operational status. The page title, 'Kūsho World | Claim,' suggests an attempt to lure victims into interacting with a fraudulent cryptocurrency claim or reward mechanism. While the exact content and functionality of the site remain unanalyzed, the classification as a 'crypto scam' aligns with known tactics used in crypto drainer campaigns. Detection metrics are limited; the domain appears on one security blocklist, and a Gridinsoft trust score of 0/100 further indicates potential malicious intent. No vendor detections were recorded at the time of the last scan, though this does not confirm the domain's safety. Infrastructure analysis reveals the use of Vercel for hosting and HSTS implementation, which may be leveraged to enhance the appearance of legitimacy. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. Defenders are advised to monitor this domain for further indicators of compromise, including wallet addresses, transaction patterns, or additional infrastructure changes. Given its active status and low detection rate, organizations should consider proactive blocking or alerting mechanisms to mitigate potential exposure.