# spacepayclaim.pages.dev — SUSPICIOUS

> Domain spacepayclaim.pages.dev is an ACTIVE crypto drainer mimicking SpacePay. 4/95 VirusTotal detections. Verify on PhishDestroy for safety.

## Summary
PhishDestroy identifies the active crypto drainer site spacepayclaim.pages.dev as a high-risk threat targeting cryptocurrency users. This domain operates as a fraudulent SpacePay impersonation designed to deceive users into connecting wallets and draining funds via a malicious drainer kit. The infrastructure is leveraged to harvest private keys, seed phrases, and transaction approvals under the guise of a legitimate claims portal.  This domain exhibits multiple malicious indicators confirmed by threat intelligence sources. VirusTotal reports a 4/95 detection ratio from security vendors. The domain is registered through Cloudflare, Inc., resolving to IP 188.114.96.3 and secured with a Google Trust Services SSL certificate. It has appeared on 2 security blocklists and remains unlisted by Google Safe Browsing (GSB) as of current checks. Technical telemetry suggests recent deployment, though the exact creation date is not disclosed in public records.  Current status shows active propagation with ongoing user reports of wallet drain incidents. PhishDestroy has flagged this domain under seed 551781, and it is actively blocked by Enkrypt and ScamSniffer. While immediate takedown or blocking actions may reduce exposure, residual risk remains due to the use of Cloudflare’s infrastructure and TLS encryption. Users are strongly advised to avoid interacting with this domain and verify any SpacePay-related claims through official channels only.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["Enkrypt", "ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e2f91c13-193f-4f9f-86b6-f3c779b757e7
- PhishDestroy: https://phishdestroy.io/domain/spacepayclaim.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/spacepayclaim.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/spacepayclaim.pages.dev/
Last updated: 2026-03-27