triplet[.]solclaim[.]fun

This domain, triplet.solclaim.fun, was registered on 2026-07-18 through NICENIC INTERNATIONAL GROUP CO., LIMITED and currently resolves to the IP address 104.21.10.201. VirusTotal analysis shows that 2 of 95 scanned security vendors have flagged the domain as malicious, aligning with its classification as a high‑risk crypto‑drainer. The infrastructure is active as of the report date, and no additional intelligence such as hosting ASN, geolocation, or payload details has been released. The limited detection count suggests early‑stage activity, but the presence of any vendor detections confirms that the domain is already associated with malicious behavior targeting cryptocurrency assets. Defenders should block outbound connections to 104.21.10.201 and add triplet.solclaim.fun to domain deny lists. Monitoring DNS queries for this FQDN and correlating any attempted connections with known crypto‑wallet exfiltration patterns is recommended. Because only two vendors have raised alerts, further investigation of network traffic and endpoint logs is advisable to determine whether the domain is being used in ongoing campaigns. Until additional evidence emerges, the domain should be treated as hostile and excluded from trusted lists.