pepeheimerclaim[.]com

The domain pepeheimerclaim.com was registered on February 21, 2026 and is currently taken offline. The site presented the page title "Pepe Heimer - AI Yield Optimization | Best Crypto Presale", which aligns with a wallet/seed phishing campaign. VirusTotal recorded a single positive detection out of 93 scanning engines, indicating at least one security vendor identified malicious behavior. The domain is listed on two public blocklists and received a Gridinsoft trust score of zero out of one hundred, reinforcing its classification as a high‑risk resource. Infrastructure analysis shows the domain resolves to IP address 172.67.149.82, an address owned by Cloudflare, Inc. (AS13335) and geolocated to the United States.

The SSL certificate is identified as WE1, but no further validation details are provided. The domain is actively blocked by PhishDestroy and ScamSniffer, confirming that multiple anti‑phishing services have taken mitigation steps. The campaign is described as a wallet/seed phishing operation that impersonates the brand "across", suggesting the attacker is attempting to harvest cryptocurrency wallet credentials under the guise of a legitimate service. The page title references AI yield optimization and crypto presale, which is consistent with social engineering tactics used to lure cryptocurrency investors.

No additional evidence such as login forms or redirect URLs was captured in the provided data set. Defenders should add pepeheimerclaim.com to DNS and URL filtering policies, enforce blocking of its resolving IP 172.67.149.82, and monitor Cloudflare‑associated address space for new domains that exhibit similar creation timestamps or trust‑score characteristics. Continuous re‑scanning with VirusTotal and other multi‑engine platforms is advised to capture any changes in detection status.