claim-sunpump[.]com

claim-sunpump.com is a confirmed phishing domain designed to deploy a crypto drainer scam, targeting cryptocurrency users by mimicking a legitimate claim interface. The domain is currently taken offline, but it posed an elevated risk as a crypto drainer that could steal digital assets from unsuspecting visitors. No specific brand or drainer kit was identified, but the site was flagged as a cryptocurrency scam.

Technical indicators for claim-sunpump.com include detection by 3 of 95 VirusTotal vendors, specifically alphaMountain.ai, Forcepoint ThreatSeeker, and Fortinet. The domain was registered on September 06, 2024, through Hosting Concepts B.V. d/b/a Registrar.eu, and resolves to IP address 15.197.130.221, hosted in the US on AS16509 Amazon.com, Inc. It appears on 2 security blocklists, PhishDestroy and Enkrypt, and uses an SSL certificate issued by Let's Encrypt / R12. Google Safe Browsing did not flag the domain. The page title was observed as claim-sunpump.com.

Users who may have interacted with claim-sunpump.com should take immediate safety steps. Since this is a crypto drainer, revoke any token approvals granted to the domain or associated smart contracts, and move all cryptocurrency funds to a new, secure wallet with fresh private keys. Monitor for unauthorized transactions and report the incident to relevant blockchain security platforms. To report the domain, submit details to PhishDestroy and Enkrypt blocklists, as well as to the registrar Hosting Concepts B.V. for further action.