pepe2claim[.]vip

pepe2claim.vip was registered on February 21, 2026. The domain resolves to a site whose page title is identical to the domain, indicating no apparent brand spoofing. The site has been classified as a crypto drainer, a sub‑category of crypto scams designed to lure victims into sending cryptocurrency to addresses controlled by threat actors. Security telemetry shows that four of ninety‑three VirusTotal scanners flagged the domain as malicious, reflecting a modest detection rate.

Independent blocklist providers including PhishDestroy, Polkadot, Enkrypt and Codeesura have added the domain to their deny lists, and the domain appears on a total of four public blocklists. The Gridinsoft trust scoring system assigned a score of 0 out of 100, the lowest possible rating, reinforcing the malicious assessment. As of the reporting date, the infrastructure is reported offline, and no HTTP response headers or certificate data have been captured. Consequently, details such as hosting provider, ASN, or geographic location remain unknown.

The lack of observable server responses also prevents verification of any active phishing or crypto‑drain pages. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the domain or associated IPs, and apply generic crypto‑drain mitigation controls, such as user education on unsolicited crypto transfer requests. Threat intelligence feeds should be updated with the domain's indicators of compromise, and any future sightings should be correlated with the existing blocklist entries. Continuous re‑analysis is advised should the domain become active again, to capture additional technical artifacts.