claim-ponke[.]pages[.]dev

The domain claim-ponke.pages.dev was a phishing site designed to function as a crypto drainer, a type of scam that targets cryptocurrency wallets by draining funds without the owner's consent. This site did not impersonate a specific brand or use a known drainer kit. As of the latest verification, claim-ponke.pages.dev has been taken offline, but its prior activity poses a risk to users who may have interacted with it.

Technical indicators confirm the malicious nature of claim-ponke.pages.dev. The domain was flagged by 1 of 95 VirusTotal security vendors, including Fortinet, and appeared on 1 security blocklist (PhishDestroy). It was registered through Cloudflare, Inc. on July 26, 2024, and resolved to the IP address 172.66.44.203, hosted by Cloudflare, Inc. in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. Technologies detected included HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100. The site returned an HTTP 403 status at the time of assessment.

Users who may have interacted with claim-ponke.pages.dev should take immediate action to secure their assets. For crypto drainer threats, revoke any token approvals granted to suspicious contracts and transfer remaining funds to a new wallet. Monitor wallet activity for unauthorized transactions. Report the domain to relevant platforms, such as Google Safe Browsing, PhishTank, or local cybersecurity authorities, to aid in broader threat mitigation efforts.