MALICIOUS — HIGH
فحص التصيد والأمان للنطاق claimpehem.cryptofalconx.workers.dev
claimpehem[.]
This domain, claimpehem.cryptofalconx.workers.dev, poses a specific threat as a crypto drainer.
- VirusTotal
- 4/91
- Blocklists
- 1 · ScamSniffer
- التوفر
- يمكن الوصول إليها · الوصول مقيد · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
claimpehem.cryptofalconx.workers.dev — يمكن الوصول إليها · الوصول مقيد (HTTP 403). نوع الاحتيال: Crypto Drainer. ملخص الأدلة: VirusTotal 4/91 (ADMINUSLabs, alphaMountain.ai, Google Safebrowsing, Gridinsoft); 1 external blocklist match (ScamSniffer); PhishDestroy score 65/100. مسجّل النطاق: Cloudflare.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
This domain, claimpehem.cryptofalconx.workers.dev, poses a specific threat as a crypto drainer. The website, titled 'Pepe Heimer - AI Yield Optimization | Best Crypto Presale,' is designed to deceive users into providing sensitive information or installing malicious software that can drain crypto assets from their wallets. Analysis indicates that the domain was created on May 04, 2026, and is registered through Cloudflare, Inc. The domain resolves to the IP address 188.114.97.3 and has been flagged by 15 out of 95 security vendors on VirusTotal, indicating a significant risk level. Additionally, the domain appears on 2 security blocklists and has a Gridinsoft trust score of 0/100, further emphasizing its malicious nature.
Infrastructure analysis reveals that the SSL certificate for this domain is issued by Google Trust Services, which may give a false sense of security to users. The domain's current status is offline, having been taken down, likely due to its malicious activities being detected and reported. The use of Cloudflare for registration and Google Trust Services for the SSL certificate suggests an attempt to appear legitimate and evade initial detection.
If users have visited this domain, it is recommended that they immediately check their cryptocurrency wallets for any unauthorized transactions or suspicious activity. They should also update their security software and perform a full system scan to ensure no malicious software has been installed. Additionally, users should change any passwords or credentials that may have been entered on the site and monitor their accounts for any unusual activity.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
نطاق تغطية البيانات12 recorded checks
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
التقنيات · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org ثقة 100٪Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com ثقة 100٪HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org ثقة 100٪تحليل VirusTotal
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of claimpehem.cryptofalconx.workers.dev · checked Jun 26, 2026
الأدلة والتقارير الخارجيةIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.