# dflow-claims.pages.dev — SUSPICIOUS

> dflow-claims.pages.dev operates as a crypto drainer scam, with 0/95 VirusTotal detections. Avoid interacting with this malicious site immediately.

## Summary
PhishDestroy identifies dflow-claims.pages.dev as an active crypto drainer scam designed to trick users into connecting cryptocurrency wallets, resulting in unauthorized fund transfers. This domain mimics legitimate services to exploit unsuspecting victims, leveraging deceptive tactics to drain digital assets without direct user consent. The threat is specifically engineered for crypto theft, making it a high-risk domain for blockchain users.  This domain has been flagged across two security blocklists and is currently blocked by Enkrypt and ScamSniffer, indicating widespread recognition of its malicious nature. Registered through Cloudflare, Inc., the domain resolves to IP 172.66.47.53 and holds an SSL certificate issued by Google Trust Services, giving it a false appearance of legitimacy. VirusTotal analysis shows 0/95 security engines detecting the threat, highlighting how evasive this crypto drainer remains despite its active operation.  Users who visited dflow-claims.pages.dev should immediately revoke any wallet connections made through this domain and transfer remaining assets to a new wallet. Scan connected devices for malware and monitor blockchain transactions for unauthorized activity. Report the domain to relevant authorities and security platforms to help prevent further victimization. Exercise extreme caution with unsolicited crypto-related links and always verify URLs before engagement.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.53

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["Enkrypt", "ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/57e3c84d-869c-4aec-bb6d-843949154555
- PhishDestroy: https://phishdestroy.io/domain/dflow-claims.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/dflow-claims.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dflow-claims.pages.dev/
Last updated: 2026-03-25