# claim-pippin.fun — SUSPICIOUS

> claim-pippin.fun is a live crypto drainer site with 0/95 VirusTotal detections. This domain is actively distributing drainer malware—block it immediately.

## Summary
PhishDestroy identifies claim-pippin.fun as an active crypto drainer domain designed to steal cryptocurrency assets. The site impersonates legitimate platforms to trick users into connecting wallets and authorizing malicious transactions. No specific drainer kit has been publicly linked to this domain yet, but its infrastructure aligns with known crypto-draining operations.  This domain was flagged with 0/95 detections on VirusTotal, indicating it evades current antivirus signatures. It resolves to IP 104.21.9.238, is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, and went live on March 20, 2026. It uses a Let's Encrypt SSL certificate, suggesting an attempt to appear legitimate. As of now, it is not blocked by Google Safe Browsing (GSB), and no major threat intelligence feeds have flagged it.  The domain remains active and under investigation by security teams. Users should avoid visiting claim-pippin.fun and block the associated IP. Risk remains high due to low detection rates and fresh registration. Security vendors are urged to update signatures and blocklists promptly.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-20 19:18:28
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 104.21.9.238

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f509522c-ea72-4356-b9c1-c2e9eea4a30d
- PhishDestroy: https://phishdestroy.io/domain/claim-pippin.fun/
- LLM endpoint: https://phishdestroy.io/domain/claim-pippin.fun/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/claim-pippin.fun/
Last updated: 2026-03-21