Is claim-peipeicoin.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page, recently registered domain whose visible content is a brief interstitial titled "Security Check". The page carries almost no text. Its hostname pattern suggests a cryptocurrency token-claim or airdrop-style offer, but the page publishes no product description, company name, or service terms. Its apparent purpose is to funnel visitors through a verification-style prompt, not to run a transparent, identifiable business.

Scam/Impersonation Risk

This site is confirmed blacklisted. Several major security vendors independently flag it as malicious, and a number of further engines mark it suspicious. The detections are corroborated across sources and are strong enough to override every mitigating signal. The page's "Security Check" framing is a familiar pretext for steering visitors into a claim or verification step. Combined with a hostname that evokes a token giveaway, it fits the pattern of lure pages built around cryptocurrency claims. The evidence does not show whether the operator is an impostor of a specific brand or a standalone malicious actor, and no conflicting legal identities were observed. In sandboxed browsing the page made several outbound data submissions to third-party destinations outside the site's own infrastructure, and it generated a large volume of script errors. Both are consistent with a hastily assembled or poorly maintained page that exchanges data with unrelated services. No wallet-connection prompts, clipboard manipulation, hidden credential forms, or content cloaking were observed in the sessions captured, so the risk rests on the external threat detections and the page's profile, not on a demonstrated drainer mechanism. Evidence:

• Homepage: a minimal "Security Check" page with only a few sentences of text, and no identifiable brand, product, or operator.
• Reputation: 14 engines flag the domain as malicious and 2 as suspicious, including three tier-one security vendors, with 31 engines reporting no detection. A kill-switch condition for heavy malicious detections is active.
• Domain provenance: registered 2026-07-30 (about 0.25 years old, roughly three months), with a single web-archive snapshot from 2026 and no earlier history.
• Homepage behaviour: 3 outbound POST requests to non-whitelisted third-party hosts, 9 external XHR/fetch calls, and 35 console errors across 3 successful sandbox runs.

Regulatory Verification Notes

The site presents no legal, terms, privacy, or about pages that name an operating entity, and it discloses no license, registration number, or regulated status. Those gaps are secondary here, because the confirmed external detections matter far more than any missing disclosure. No independent regulatory or broker-reputation record matched this domain. Registration details are incomplete, which points to ownership opacity and leaves the real-world operator unverified, so no claim of legitimacy can be anchored to a named entity. The domain is registered through NICENIC International Group Co., Limited, a registrar that offers no mitigating weight against the threat detections. The valid TLS certificate is a domain-validated one, which confirms only encrypted transport and says nothing about who operates the site. Evidence:

• Homepage: no company name, license number, jurisdiction, or regulator reference is published.
• Hosting and transport: served from AS13335 (Cloudflare, Inc., US); the TLS certificate is issued by WE1 (DV), valid to 2026-12-26, with 57 days remaining at the time of analysis.
• Registration: registrar NICENIC International Group Co., Limited, with the registration record expiring 2027-07-30 and owner details incomplete.
• Third-party broker databases: no match was found, so there is no reputational context from that source either way.

What to Verify Next

Before any interaction, the primary question is whether the page was actually reached through an official channel. Anyone who arrived via a social post, message, or advertisement promising a token claim should treat that origin as unverified. They should navigate to the project's website by typing its address manually or using a trusted bookmark, and then confirm whether any official claim or airdrop campaign exists at all. Confirm the official support and contact channels through an independent route, such as the project's verified social profiles. If a regulated or licensed entity is claimed, check the relevant public registry directly. Evidence:

• Domain registration is only about three months old, so there is no long operating record to confirm the site's identity against.
• Homepage: no named operator or official campaign reference is presented.
• Reputation: the confirmed external detections remain active as of this analysis, so any later change in status should be checked against current sources.

Summary Verdict

The site carries a critical risk posture. Active, multi-vendor malicious detections, a very young domain, and an unverified, opaque operator converge on a clearly adverse assessment. Valid encryption and established hosting do not offset these findings, and nothing in the evidence supports treating the site as legitimate.

Infrastructure Integrity

The site is fronted by Cloudflare, with all observed addresses being edge servers in the US and no origin server visible. That protection is only a mitigating factor. It prevents independent verification of where the content is actually hosted and can mask rapid content changes behind a stable edge, so it provides no assurance of legitimacy. The infrastructure itself shows no abuse reports.

Closing Assessment

Do not enter credentials, connect a wallet, sign transactions, or make any financial or personal-data submission on this site, and do not download anything from it. If it was reached through an unsolicited link, close the page, avoid further interaction, and report the source of the link. Anyone who has already interacted with it should review wallet approvals, rotate affected credentials, and monitor their accounts.