# claim.ethgasfoundation.click — SUSPICIOUS

> Beware claim.ethgasfoundation.click—a live crypto-drainer domain with 0/95 VirusTotal detections. Protect your digital assets today.

## Summary
PhishDestroy identifies an active crypto-drainer domain, claim.ethgasfoundation.click, which poses a significant risk to cryptocurrency users by surreptitiously draining funds from connected wallets. This domain mimics the Eth Gas Foundation brand to deceive visitors into connecting their wallets, triggering unauthorized transactions that siphon off cryptocurrency assets. Security researchers have observed a surge in such drainer sites exploiting trust in reputable blockchain organizations to maximize the success of their theft campaigns. Users are strongly advised to exercise extreme caution and verify the legitimacy of any site before connecting their wallets or entering sensitive information.  This domain was flagged by PhishDestroy with a unique seed identifier 4a04ab and is currently under investigation. Threat intelligence reveals it resolves to IP address 188.114.97.3 and was registered through Dynadot, LLC on April 01, 2026. Notably, claim.ethgasfoundation.click utilizes a Let's Encrypt SSL certificate to appear legitimate, while VirusTotal currently shows 0 out of 95 security engines detecting the domain as malicious. The combination of a newly registered domain, low detection rates, and the use of a trusted certificate authority demonstrates the sophisticated tactics employed by threat actors to evade detection and exploit unsuspecting victims.  If you have visited claim.ethgasfoundation.click, immediately disconnect your wallet from the site and revoke any permissions granted to suspicious domains using your wallet's interface or a reputable blockchain explorer. Transfer any remaining assets to a secure wallet not associated with the compromised site. Report the incident to your wallet provider and relevant cryptocurrency platforms, and consider filing a complaint with cybercrime authorities. Monitor your transaction history closely for unauthorized activity. Finally, ensure your antivirus software is updated and consider using browser extensions that block known malicious domains to prevent future exposure to such threats. Stay informed and vigilant to safeguard your digital assets against evolving crypto-drainer tactics.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-01 17:50:01
- Registrar: Dynadot, LLC
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/claim.ethgasfoundation.click
- PhishDestroy: https://phishdestroy.io/domain/claim.ethgasfoundation.click/
- LLM endpoint: https://phishdestroy.io/domain/claim.ethgasfoundation.click/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/claim.ethgasfoundation.click/
Last updated: 2026-04-04