claim-rocket[.]pages[.]dev

PhishDestroy identifies claim-rocket.pages.dev as an active crypto drainer domain under investigation, flagged for malicious behavior targeted at cryptocurrency users. The domain resolves to IP address 188.114.97.3 and employs SSL encryption via a Let's Encrypt certificate to appear legitimate. No detections have been triggered yet on VirusTotal (0/95 engines), highlighting a gap between current AV coverage and the domain's evolving threat profile.

This domain was flagged through Cloudflare and is currently flagged as active with no confirmed resolution date. The IP address 188.114.97.3 appears associated with dynamic or proxy services commonly used to obscure malicious infrastructure. The VirusTotal analysis shows zero detections across 95 threat intelligence engines, suggesting a newly deployed or carefully obfuscated payload. The domain name mimics legitimate withdrawal or claim platforms, a common tactic in crypto drainer campaigns to deceive users expecting transaction confirmations.

To mitigate risk, users should avoid interacting with claim-rocket.pages.dev entirely. If you believe you’ve accessed this site, immediately disconnect from the internet, clear browser cache, and revoke any wallet connections made through the site. Use phishing detection tools like PhishDestroy to verify links before clicking and enable hardware wallet signing for all cryptocurrency transactions. Report this URL immediately to your wallet provider and local cybersecurity authorities. Monitor your wallet and enable transaction alerts to detect unauthorized transfers promptly.