spsdao-claim[.]pages[.]dev

PhishDestroy identifies spsdao-claim.pages.dev as an active cryptocurrency drainer impersonating the SPS DAO governance portal of the Splinterlands blockchain game.

This domain was flagged by zero of 95 VirusTotal vendors, which is expected given its recent deployment and the stealthy nature of crypto drainer operations. It is registered through Cloudflare, Inc., resolves to IP 172.66.46.252, and is served over a valid Let's Encrypt SSL certificate. At the time of analysis, the page title ‘SPS DAO - Splinterlands Governance’ mirrors the legitimate SPS DAO portal, which raises significant concern regarding user deception.

The domain remains active and unlisted on major blocklists as of this report, indicating it has evaded mainstream detection mechanisms. Risk exposure is elevated due to the false governance theme and the use of Cloudflare Workers, which can bypass traditional hosting-based filtering. Users interacting with this domain risk unauthorized transfers of Splinterlands SPS tokens and other digital assets via malicious JavaScript payloads commonly associated with crypto drainers. Immediate actions include blocking the domain at network and endpoint level, discontinuing any SPS-related transactions, and verifying all governance communications through the official splinterlands.com domain only.