claimdunkins[.]com

This domain, claimdunkins.com, is currently flagged as an active crypto drainer operation with a high risk level. Registered on March 7, 2026, through GoDaddy.com, LLC, the domain resolves to the IP address 216.198.79.1 and presents a page titled 'Lovable App,' though the exact content and functionality of the site remain unconfirmed. Analysis indicates that the domain has been detected by two security blocklists and is recognized in two AlienVault OTX threat intelligence pulses, suggesting it has been linked to malicious activity in recent months. Infrastructure analysis reveals the use of Vercel for hosting and HSTS implementation, alongside a Let's Encrypt SSL certificate, which may be employed to lend an appearance of legitimacy. Detection metrics indicate limited but notable scrutiny, with two out of ninety-five security vendors on VirusTotal flagging the domain as malicious. The domain's trust score is rated at 0 out of 100 by Gridinsoft, reinforcing concerns about its credibility. What remains uncertain is the precise mechanism of the crypto drainer, as well as the specific cryptocurrency wallets or services being targeted. The domain's registration age—over four months at the time of this report—suggests it may be part of a longer-term campaign rather than a short-lived operation. Defenders should prioritize blocking this domain at the network level, particularly in environments where cryptocurrency transactions are common. Monitoring for connections to 216.198.79.1 and associated domains registered under the same infrastructure may also help identify related threats. Given its presence on multiple blocklists and threat intelligence feeds, this domain should be treated as a confirmed malicious asset until further evidence suggests otherwise.