# survey-claim.top — MALICIOUS

> Beware! survey-claim.top is a crypto drainer posing as a legitimate service. PhishDestroy flags it after 6/95 VirusTotal detections—verify before clicking.

## Summary
PhishDestroy identifies survey-claim.top as an active crypto drainer domain designed to steal cryptocurrency from unsuspecting users. This fraudulent site masquerades as a rewards or claim portal, tricking victims into connecting their wallets or entering sensitive credentials. Once accessed, malicious scripts drain connected crypto wallets by exploiting smart contract approvals or phishing for private keys. Security researchers have confirmed its involvement in unauthorized fund transfers targeting Ethereum, Solana, and other blockchain networks.  This domain was flagged by PhishDestroy after only 3 days of operation, created on June 05, 2025. VirusTotal analysis shows 6 out of 95 security vendors have already detected its malicious nature. The domain is registered through Hosting Concepts B.V. d/b/a Registrar.eu, using Google Trust Services for SSL certification. It resolves to IP address 172.67.223.96, which is associated with multiple crypto scam campaigns detected in recent threat intelligence feeds.  If you visited survey-claim.top, disconnect your wallet immediately using a dedicated tool like WalletGuard or revoke suspicious token approvals via Etherscan or equivalent block explorers. Do not interact with any prompts for seed phrases, private keys, or wallet connections. PhishDestroy recommends running a full system scan with updated antimalware software and changing passwords only from a known-secure device. Report the domain to your wallet provider and relevant crypto platforms to help prevent further victimization. Always verify URLs via official sources before clicking, especially those promising unsolicited rewards or urgent claims.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-06-05 18:30:14
- Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
- IP: 172.67.223.96

## Detection Status
- VirusTotal: 6 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/7c127754-c364-4957-823e-9b534ed31758
- PhishDestroy: https://phishdestroy.io/domain/survey-claim.top/
- LLM endpoint: https://phishdestroy.io/domain/survey-claim.top/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/survey-claim.top/
Last updated: 2026-03-27