pepe-claims[.]app
pepe-claims.app — Kesalahan server (HTTP 502). Jenis penipuan: Fake Airdrop. Ringkasan bukti: VirusTotal 11/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 1 alert; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 87/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
PhishDestroy identifies pepe-claims.app as an active crypto drainer site impersonating PEPE token claim offers to trick users into connecting crypto wallets. The domain, registered on April 04, 2026, hosts a drainer kit designed to siphon cryptocurrency assets under the guise of distributing PEPE tokens. While no specific drainer kit variant was disclosed in available telemetry, the site’s operational focus aligns with known crypto drainer tactics, including wallet connection prompts and fraudulent token claim interfaces. The infrastructure leverages a Let's Encrypt SSL certificate to appear legitimate, likely to bypass browser security warnings and deceive users into trusting the domain.
This domain was flagged by PhishDestroy with a crypto drainer threat type and currently holds a VirusTotal detection score of 11/95, indicating it has evaded antivirus engines as of the latest scan. It resolves to IP address 104.21.14.138 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain is newly created, with no presence on Google Safe Browsing (GSB) blocklists or major threat intelligence feeds at this time, contributing to its current low detection footprint. The absence of historical data and immediate detection gaps suggest this campaign is either newly operational or deliberately evasive.
As of this assessment, pepe-claims.app remains active and poses a significant risk due to its crypto drainer functionality. Users interacting with the site risk immediate asset loss if they connect a wallet or approve transactions. PhishDestroy recommends blocking the domain at the network level, avoiding any wallet connections, and reporting the site to relevant authorities. The risk level is classified as under investigation but is expected to escalate to high pending further threat intelligence updates. Immediate caution is strongly advised for users engaging with PEPE token-related claims or similar crypto airdrop promotions.
Intelijen Keamanan Jaringan Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | pepe-claims.app |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-15 03:15:47 UTC
Intelijen Forensik
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of pepe-claims.app · checked Apr 4, 2026
Bukti & Laporan Eksternal
PD-20260404-115A64 Recipient: abuse@nicenic.net, registrar-abuse@google.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive