claim-cryptoallstars-io[.]pages[.]dev

The domain claim-cryptoallstars-io.pages.dev is a suspected crypto drainer phishing site that poses a significant risk to users. This domain, which is currently taken offline, has been flagged by 2 of 95 vendors on VirusTotal, including Fortinet and Trustwave, and appears on 1 security blocklist, PhishDestroy. The site does not impersonate any specific brand and does not use a known drainer kit. Users should avoid interacting with this domain to prevent potential cryptocurrency theft.

The domain claim-cryptoallstars-io.pages.dev was registered through Cloudflare, Inc. on December 23, 2024. It resolves to the IP address 172.66.46.225, which is located in the US and belongs to AS13335 Cloudflare, Inc. The SSL certificate for the domain is issued by Google Trust Services / WE1. Despite being flagged by a few vendors, it has not been marked as unsafe by Google Safe Browsing. The domain uses technologies such as HSTS, Cloudflare, and HTTP/3. As of the latest assessment, the HTTP status of the site is 403, indicating that access is forbidden.

If users have interacted with claim-cryptoallstars-io.pages.dev, they should immediately revoke any token approvals and move their cryptocurrency funds to a new, secure wallet to mitigate the risk of theft. For additional security, users should enable two-factor authentication (2FA) on all their cryptocurrency accounts and monitor their transactions for any unauthorized activity. Any suspicious activity should be reported to the relevant cryptocurrency platform and to security organizations like PhishDestroy for further analysis and action.