claims[.]deepbook[.]me

The domain claims.deepbook.me is a cryptocurrency phishing site designed to function as a crypto drainer, a type of scam that automatically siphons funds from connected wallets. No legitimate brand or known drainer kit is associated with this domain. As of the latest verification, claims.deepbook.me has been taken offline, but its prior activity poses a confirmed risk to users who may have interacted with it.

Technical indicators confirm the elevated risk level. claims.deepbook.me was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar, and appears on 1 security blocklist (PhishDestroy). The domain was registered on October 24, 2024, through Hosting Concepts B.V. d/b/a Registrar.eu and resolved to the IP address 15.197.130.221, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. No SSL certificate was issued, and the observed page title was 'deepbook.me'. Nameservers for the domain are ina1.registrar.eu, ina2.registrar.eu, and ina3.registrar.eu. Gridinsoft assigned a trust score of 0/100 to the site.

Users who connected a wallet to claims.deepbook.me should immediately revoke all token approvals using a tool like revoke.cash or Etherscan's token approval checker. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. If credentials were entered, change passwords on all associated accounts and enable two-factor authentication. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to assist in broader mitigation efforts.