claims-cope[.]xyz

The domain claims-cope.xyz is a phishing site engaged in brand impersonation targeting Revolut users, specifically promoting a cryptocurrency scam under the guise of an airdrop. It does not utilize a known drainer kit but poses an elevated risk due to its fraudulent activity. As of the latest verification, claims-cope.xyz has been taken offline.

Technical indicators confirm the malicious nature of claims-cope.xyz. The domain was registered on 2025-08-31 through OwnRegistrar, Inc., and resolves to the IP address 172.67.219.29, hosted on Cloudflare's infrastructure in the US. Security vendors flagged it with 2 of 95 detections on VirusTotal, including alerts from alphaMountain.ai and G-Data. It appears on 2 security blocklists, PhishDestroy and ScamSniffer, and holds a Gridinsoft trust score of 0/100. The SSL certificate is issued by WE1, and the observed page title was 'Cope | Airdrop'. Google Safe Browsing has not flagged the domain at this time.

Individuals who interacted with claims-cope.xyz should take immediate action to secure their assets and accounts. For cryptocurrency-related scams, revoke any token approvals granted to the site and transfer funds to a new wallet. If login credentials were entered, change passwords for Revolut and any other accounts where the same credentials may have been reused, and enable two-factor authentication. Report the phishing domain to Revolut's security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.