claim[.]runeswap[.]com

The domain claim.runeswap.com is currently active and classified as a crypto drainer with a high risk rating. The site returns HTTP status code 200 and serves a page titled LASER EYES. Infrastructure analysis shows the domain resolves to the IPv4 address 216.150.1.129, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. Technical profiling reveals the use of Webflow, Vercel, Twitter integration, HSTS, Google Hosted Libraries, and Google Font API. The authoritative name servers are dns1.registrar-servers.com and dns2.registrar-servers.com. The TLS certificate is issued by Let’s Encrypt under the R13 identifier, indicating a valid but short‑lived certificate. Registration details indicate the domain was created on 24 February 2021 through NameCheap, Inc. Reputation data shows the domain appears on one security blocklist and has been blocked by PhishDestroy. VirusTotal analysis reports a single detection out of 95 scanned security vendors, confirming at least one vendor flagged the site as malicious. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious classification. These indicators collectively support the high‑risk crypto drainer designation. Defenders should add claim.runeswap.com and its resolving IP 216.150.1.129 to deny‑list rules across perimeter and endpoint controls. Continuous monitoring of the associated Amazon infrastructure for any new sub‑domains is advised. Updating intrusion detection signatures to include the observed technology stack and HSTS usage can reduce false negatives. Given the active status, organizations handling cryptocurrency assets should treat any traffic to this domain as hostile.