# claim-nasa.pages.dev — SUSPICIOUS

> Beware of claim-nasa.pages.dev—a crypto drainer site with 0/95 VirusTotal detections exploiting NASA branding to steal digital assets.

## Summary
PhishDestroy identifies the domain claim-nasa.pages.dev, currently under investigation, as a confirmed crypto drainer targeting unsuspecting victims under the guise of NASA-related claims.

This domain presents a significant risk due to its active crypto-draining operations, designed to siphon cryptocurrency from victims under false pretenses. Intelligence reveals it resolves to IP 172.66.44.52, leverages a Let's Encrypt SSL certificate for legitimacy, and operates under Cloudflare, Inc. as its registrar. Notably, VirusTotal currently flags 0/95 engines for malicious activity, indicating its evasion of detection frameworks, while Cloudflare’s infrastructure further complicates blocking efforts.

Users who have accessed this domain should immediately cease any interactions with cryptocurrency wallets or transactions linked to it. Disconnect any devices that visited the site, scan for malware using reputable antivirus tools, and monitor financial accounts for unauthorized activity. Report the domain to your organization’s SOC or local cybercrime units if enterprise-related, and reset passwords linked to crypto-related accounts—leveraging unique, complex credentials—to mitigate further compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.52

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/claim-nasa.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/claim-nasa.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/claim-nasa.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/claim-nasa.pages.dev/
Last updated: 2026-04-02