# pumpfun-claimyoutoken-sol-zr41n3r.pages.dev — SUSPICIOUS

> pumpfun-claimyoutoken-sol-zr41n3r.pages.dev is a crypto drainer impersonating OKX, flagged by 1/95 VirusTotal security vendors.

## Summary
PhishDestroy identifies pumpfun-claimyoutoken-sol-zr41n3r.pages.dev as an active crypto drainer impersonating the OKX brand to steal cryptocurrency. This site lures victims with fake token claim opportunities, tricking users into connecting wallets or entering private keys under the guise of claiming rewards. Once connected, the drainer silently transfers funds to attacker-controlled wallets, leading to irreversible financial loss.  This domain was flagged with elevated risk by PhishDestroy’s automated analysis. VirusTotal reports only 1 out of 95 security vendors detected the threat as of the latest scan. The domain is registered through Cloudflare, Inc. and resolves to IP address 188.114.96.3, hosted on Google Trust Services’ SSL infrastructure. Its recent creation and use of cloud-based hosting make it harder to detect using traditional URL filtering systems.  If you visited this site, disconnect your wallet immediately and revoke any connected permissions via your wallet provider’s security settings. Do not enter any private keys or seed phrases. Scan your device with trusted antivirus software and consider transferring remaining funds to a new wallet. Report the incident to OKX support and update your account security. Always verify URLs and avoid clicking links from unsolicited messages.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/21d81365-b41c-4289-9bda-c07de17e90da
- PhishDestroy: https://phishdestroy.io/domain/pumpfun-claimyoutoken-sol-zr41n3r.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/pumpfun-claimyoutoken-sol-zr41n3r.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pumpfun-claimyoutoken-sol-zr41n3r.pages.dev/
Last updated: 2026-03-22