claim-cyberkongz[.]xyz

The domain claim-cyberkongz.xyz was registered on February 21, 2026 and is presently offline. Infrastructure analysis shows that the domain resolves to the IP address 104.21.64.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The host provider is a widely used content delivery network, a common choice for malicious operators seeking to hide behind reputable infrastructure. The site presented the page title "$KONG | Airdrop Eligibility Checker," indicating the use of an Airdrop Scam phishing kit that pretends to assess eligibility for a token airdrop.

The kit is explicitly linked to a crypto‑scam payload and targets the Metamask brand, as reflected in the documented impersonation of Metamask. SSL certificate details are limited to the identifier "WE1," confirming that the site served traffic over HTTPS, a tactic frequently employed to increase user trust. Detection data reveal that five of ninety‑three security vendors on VirusTotal flagged the domain as malicious, and Gridinsoft assigned a trust score of zero out of one hundred, underscoring a high confidence of malicious intent. The domain appears on a single security blocklist and was blocked by the PhishDestroy filtering service, confirming that active defensive feeds have identified it as a threat.

For defenders, the evidence suggests that claim-cyberkongz.xyz was leveraged as a brand‑impersonation vector aimed at extracting cryptocurrency credentials from Metamask users. Given the low trust score, multiple vendor detections, and confirmed blocklist presence, organizations should ensure that outbound traffic to the associated IP address is monitored or denied, especially from environments handling cryptocurrency wallets. Continuous updates to URL filtering and phishing‑prevention tools are recommended to capture any future re‑activations of the domain or similar patterns.