cryptoclaim[.]space

The domain cryptoclaim.space was a phishing site engaged in brand impersonation targeting Crypto.com users. It posed an elevated risk as a cryptocurrency scam, designed to deceive victims into believing they were interacting with the legitimate Crypto.com platform. No drainer kit was identified, but the site was actively used for credential harvesting or fraudulent transactions. As of the latest verification, cryptoclaim.space has been taken offline.

Technical indicators confirm the malicious nature of cryptoclaim.space. The domain was flagged by 1 of 95 VirusTotal security vendors, including ESET, and appeared on 2 security blocklists (PhishDestroy and Enkrypt). It was registered through ABOVE.COM PTY LTD. on November 21, 2024, and resolved to the IP address 91.195.240.112, hosted in Germany under AS47846 SEDO GmbH. No SSL certificate was available, and the observed page title indicated a placeholder or for-sale notice. Nameservers were ns12.abovedomains.com and ns11.abovedomains.com.

Victims of cryptoclaim.space should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions. If cryptocurrency was involved, revoke any token approvals granted to suspicious contracts and transfer funds to a new wallet. Report the domain to relevant platforms, including Crypto.com’s official fraud reporting channels, and submit the URL to Google Safe Browsing, PhishTank, or other threat intelligence feeds to prevent further abuse.