redoclaim[.]pages[.]dev

The domain redoclaim.pages.dev is currently active and identified as a crypto drainer threat. This malicious domain attempts to illicitly extract cryptocurrency assets from victims, posing an elevated risk to users interacting with it. No specific brand impersonation has been confirmed for this domain.

This domain is flagged by 1 of 95 security vendors on VirusTotal and appears on 1 security blocklist, confirming its malicious nature. It resolves to IP address 172.66.46.230 and was registered through Cloudflare, Inc. Additionally, Google Safe Browsing categorizes it under SOCIAL_ENGINEERING threats. The domain holds a valid SSL certificate issued by Google Trust Services and is also blocked by ScamSniffer, adding layers of verified threat intelligence.

Given the elevated risk level and active status of redoclaim.pages.dev, users are strongly advised to avoid interacting with this domain to protect their crypto assets. Security teams should ensure this domain is added to internal blocklists and monitor for any related attempts of crypto draining. Continuous updates from threat intelligence sources are recommended to track any changes in the domain's behavior or infrastructure.