# moonbag-claim.pages.dev — MALICIOUS

> moonbag-claim.pages.dev is a crypto drainer scam flagged by 12 of 95 security vendors. If you interacted with this site, revoke wallet permissions immediately.

## Summary
PhishDestroy identifies moonbag-claim.pages.dev as an elevated-risk crypto drainer domain actively impersonating legitimate cryptocurrency services. This domain specifically targets users by tricking them into connecting wallets or entering recovery phrases under false pretenses, such as claiming tokens or rewards. Once connected, the domain exploits wallet permissions to drain funds or steal credentials without explicit confirmation from the victim.  

This domain was flagged by 12 of 95 security vendors on VirusTotal, indicating widespread recognition of its malicious intent. Registered through Cloudflare, Inc., the domain uses a Google Trust Services SSL certificate to appear legitimate and resolves to IP 172.66.47.18. Its active status suggests it is currently operational and posing a real threat to unsuspecting users.  

If you visited moonbag-claim.pages.dev, immediately disconnect your wallet from the site, revoke any granted permissions, and transfer remaining assets to a new wallet. Check transaction history for unauthorized transfers and consider reporting suspicious activity to your wallet provider or relevant authorities. Avoid interacting with any links or prompts from this domain to prevent further compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.18

## Detection Status
- VirusTotal: 12 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/dfffd4ce-ec5b-4f31-b04b-3e4053dcb68a
- PhishDestroy: https://phishdestroy.io/domain/moonbag-claim.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/moonbag-claim.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/moonbag-claim.pages.dev/
Last updated: 2026-04-01