claim[.]fundcheck[.]us

The domain claim.fundcheck.us is a phishing site designed to function as a crypto drainer, a type of scam that targets cryptocurrency wallets by draining funds once a victim connects their wallet. No legitimate brand or known drainer kit is associated with this domain. As of the latest verification, claim.fundcheck.us has been taken offline, but it previously posed an elevated risk to users who may have interacted with it.

Technical indicators confirm the malicious nature of claim.fundcheck.us. The domain was flagged by 1 of 95 security vendors on VirusTotal, specifically Gridinsoft, and appeared on 1 security blocklist (PhishDestroy). It was registered through GoDaddy.com, LLC on July 15, 2025, and resolved to the IP address 185.158.133.1, located in Poland under AS13335 (Cloudflare, Inc.). No SSL certificate was available, and the observed page title was 'Claim Your Stimulus Check Here'. The domain used nameservers ns59.domaincontrol.com and ns60.domaincontrol.com and received a Scamadviser trust score of 1 out of 100.

Users who may have interacted with claim.fundcheck.us should take immediate action to secure their assets. Revoke any token approvals granted to the site using a tool like Etherscan or Revoke.cash, and transfer remaining funds to a new, secure wallet. Monitor wallet activity for unauthorized transactions and report the domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.