chipreclaim[.]lat

The domain chipreclaim.lat is identified as a crypto drainer, a type of phishing threat designed to steal cryptocurrency from victims. As of the latest assessment, the domain is currently offline. The specific nature of the threat involves the unauthorized redirection of cryptocurrency transactions to attacker-controlled wallets, potentially leading to significant financial losses for users who interact with the site.

Analysis indicates that the domain is flagged by 10 of 95 security vendors on VirusTotal, suggesting a high level of suspicion among the cybersecurity community. The domain is registered through Dynadot LLC and resolves to the IP address 104.21.22.134. It was created on April 5, 2026. The domain appears on three security blocklists and has been blocked by MetaMask, PhishDestroy, and SEAL. The Gridinsoft trust score for chipreclaim.lat is 0 out of 100, indicating a complete lack of trust in the domain. Additionally, the domain has been mentioned in one threat intelligence pulse on AlienVault OTX, further corroborating its association with malicious activities.

Although the domain is currently offline, it remains a high-risk threat due to its history of malicious activity. Organizations and individuals are advised to continue monitoring for any signs of the domain coming back online. Security teams should ensure that their network and endpoint protection systems are updated to block any future attempts to access chipreclaim.lat. Users are recommended to verify the legitimacy of any websites requesting cryptocurrency transactions and to use multi-factor authentication for all digital wallets and financial accounts.