claimdoge20live[.]pages[.]dev

The domain claimdoge20live.pages.dev has been identified as an active crypto drainer phishing site. This infrastructure specifically targets cryptocurrency wallet users by deploying malicious scripts designed to drain funds from connected wallets without authorization. Analysis indicates the site remains operational, posing a direct financial threat to unsuspecting victims who interact with it. Infrastructure analysis reveals the domain was created on March 27, 2026, and is registered through Cloudflare Pages. It resolves to the IP address 188.114.96.3, located in Canada under Cloudflare, Inc. Security vendors have flagged this domain, with 13 out of 95 on VirusTotal detecting it as malicious. Google Safe Browsing has also classified it as phishing. The domain appears on three security blocklists and is actively blocked by multiple threat detection systems. Its SSL certificate is issued by Google Trust Services, using the WE1 intermediate certificate, which is consistent with legitimate but abused hosting environments. Current status confirms the domain remains active and continues to host malicious crypto-draining scripts. Organizations and individuals are advised to block the domain and its resolving IP address at the network level. Users should avoid interacting with any content hosted on claimdoge20live.pages.dev, particularly links or pop-ups requesting wallet connections. Wallet providers are recommended to monitor for connections originating from this domain and issue warnings to affected users. Given the high-risk nature of crypto drainers, immediate isolation of any compromised wallets and revocation of active sessions is critical to prevent further asset loss.