# claimchain.pages.dev — MALICIOUS

> claimchain.pages.dev hosted a high-risk crypto draining scheme, now offline. Stay vigilant and avoid suspicious crypto domains. Learn more on PhishDestroy.

## Summary
PhishDestroy identifies claimchain.pages.dev as a high-risk crypto drainer domain designed to steal cryptocurrency assets from unsuspecting victims. Such threats pose serious financial risks and undermine user trust in digital asset transactions, making awareness critical.

The domain was registered through Cloudflare, Inc. on February 21, 2026, and was flagged on two security blocklists. Analysis from VirusTotal indicates that 15 out of 95 security vendors identified malicious behavior associated with this domain. Fortunately, the domain has since been taken offline, reducing immediate danger.

Users are advised to remain cautious when interacting with unknown crypto-related websites, especially those resembling claimchain.pages.dev. Avoid clicking on suspicious links or sharing private keys and credentials. Always verify domain authenticity before making any cryptocurrency transactions to protect your assets.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.171
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["algin.ns.cloudflare.com", "margot.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "Criminal IP", "alphaMountain.ai", "BitDefender", "Chong Lua Dao", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c7c73-5e09-7384-82ac-4ba35c267fe3.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/fead850c-f6e0-406c-bb78-c104188c90e0
- PhishDestroy: https://phishdestroy.io/domain/claimchain.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/claimchain.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/claimchain.pages.dev/
Last updated: 2026-03-19