claim-cuhcoin[.]pages[.]dev

This domain, claim-cuhcoin.pages.dev, is flagged as an active airdrop scam designed to impersonate legitimate cryptocurrency projects. The page title, 'Cuh Coin | Airdrop,' explicitly targets users seeking token distributions, a common tactic in fraudulent schemes aimed at credential harvesting or wallet draining. Infrastructure analysis reveals no direct association with known drainer kits, but the domain exhibits characteristics typical of short-lived, high-risk impersonation campaigns targeting decentralized finance (DeFi) participants.

Technical indicators confirm the domain's malicious classification. VirusTotal reports 3/95 security vendors flagging the domain, while it appears on four distinct security blocklists, including PhishDestroy and ScamSniffer. The domain was registered through Cloudflare, Inc. on May 30, 2026, and resolves to the IP address 172.66.47.162, hosted on Cloudflare's infrastructure (AS13335). The SSL certificate is issued by Let's Encrypt (YE2), a common choice for both legitimate and malicious sites due to its accessibility. Despite its recent creation date, the domain has already been blocked by multiple security frameworks, indicating rapid detection and response by the cybersecurity community.

As of the latest assessment, claim-cuhcoin.pages.dev remains active, posing an ongoing risk to users. The domain's infrastructure, combined with its impersonation of cryptocurrency airdrops, suggests a high likelihood of continued fraudulent activity. Recommended response actions include immediate blocking at the network and endpoint levels, monitoring for related domains leveraging similar naming conventions, and user education to recognize common airdrop scam tactics. Given its persistence and the financial nature of the threat, organizations handling cryptocurrency transactions should prioritize this domain in their threat intelligence feeds.