# spongeclaim.pages.dev — SUSPICIOUS

> spongeclaim.pages.dev is a crypto-draining scam detected by VirusTotal (1/95 vendors). Avoid this site to prevent wallet theft from fake token claims.

## Summary
spongeclaim.pages.dev poses an elevated risk as a confirmed crypto-drainer targeting cryptocurrency wallets. This domain, registered through Cloudflare, Inc., uses a Google Trust Services SSL certificate and resolves to IP 172.66.44.115. With only 1 out of 95 security vendors currently flagging it, the site remains active and deceptive.

This domain was flagged due to its crypto-draining functionality, designed to steal cryptocurrency from unsuspecting users. VirusTotal reports a detection ratio of 1/95 security vendors, indicating low but present suspicion. The domain is registered through Cloudflare, Inc., and leverages a Google Trust Services SSL certificate for an air of legitimacy. It resolves to IP 172.66.44.115, a Cloudflare-operated address, which may complicate direct blocking efforts. The use of a .pages.dev subdomain under Cloudflare Pages suggests a hastily deployed scam site, likely hosted on a reputable infrastructure to evade initial scrutiny.

To mitigate risks, users must avoid interacting with spongeclaim.pages.dev entirely. Never connect your cryptocurrency wallet to this domain or any site promoting unknown token claims. Use browser-based security tools or reputable ad-blockers with anti-crypto-drainer filters (e.g., MetaMask’s phishing detection or Etherscan’s scam registry). Report suspicious domains to platforms like Google Safe Browsing or your wallet provider. If you suspect exposure, revoke any wallet connections immediately and transfer funds to a secure wallet. Stay vigilant: crypto-drainers often mimic legitimate projects, so verify tokens and websites through official channels before any interaction.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.115

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3957004b-2264-42c9-b875-ed6f19e2fd27
- PhishDestroy: https://phishdestroy.io/domain/spongeclaim.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/spongeclaim.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/spongeclaim.pages.dev/
Last updated: 2026-04-01