aktivasiclaimhadiah10juta[.]pages[.]dev

The domain aktivasiclaimhadiah10juta.pages.dev is identified as a crypto drainer phishing site, a threat type designed to illicitly siphon cryptocurrency assets from victims' wallets. As of the latest analysis, the domain has been taken offline, though prior activity suggests it was actively targeting users with fraudulent claims of monetary rewards to initiate unauthorized transactions. No specific brand impersonation has been confirmed, but the infrastructure and tactics align with known crypto drainer campaigns. Infrastructure analysis reveals the domain was registered on August 18, 2025, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, associated with AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious domains leveraging Cloudflare's services. Detection metrics indicate the domain was flagged by 16 of 95 security vendors on VirusTotal, while Google Safe Browsing explicitly labeled it as phishing. Additionally, the domain appears on one security blocklist, specifically PhishDestroy, further corroborating its malicious classification. Given the domain's current offline status, immediate interaction risks are mitigated. However, users are advised to exercise caution with similar domains, particularly those promising monetary rewards or requiring cryptocurrency wallet connections. Organizations should update blocklists to include this domain and monitor for resurgence under altered names or subdomains. Victims of prior interactions should audit connected wallets for unauthorized transactions and consider revoking access to suspicious smart contracts. Proactive measures, such as browser-based security extensions and multi-factor authentication for wallet access, are recommended to mitigate future exposure to crypto drainer threats.