claim-quickai[.]world

Analysis of the domain claim-quickai.world indicates it is actively associated with cryptocurrency-related fraud, specifically classified as a crypto drainer. As of July 12, 2026, the domain resolves to IP address 172.67.131.235, hosted on Cloudflare infrastructure (AS13335) in the United States. The domain returns an HTTP 403 status, suggesting access restrictions or a placeholder state, while the page title 'Un momento…' implies a temporary or transitional page, potentially awaiting malicious deployment or serving as a redirect mechanism. The domain is registered through Web Commerce Communications Limited and employs Cloudflare nameservers (guy.ns.cloudflare.com, pam.ns.cloudflare.com). SSL certification is provided by Google Trust Services (WE1), a common configuration for both legitimate and malicious sites leveraging Cloudflare’s proxy services. Detection data reveals the domain appears on one security blocklist, with a Gridinsoft trust score of 0/100, reinforcing its high-risk classification. VirusTotal reports flagging by 4 of 95 security vendors, though this does not constitute exhaustive validation. Infrastructure analysis reveals the use of HTTP/3, a protocol often employed to evade traditional network monitoring. The domain’s current activity status is confirmed as active, though its exact operational mechanics—such as wallet addresses, drainer scripts, or victim interaction methods—remain unconfirmed due to the 403 response. Defenders should treat this domain as hostile, blocking resolution at DNS or network layers and monitoring for connections from internal assets. Further analysis of associated IPs, certificate transparency logs, or historical DNS records may yield additional indicators of compromise.