reclaim-frontend[.]pages[.]dev

PhishDestroy has flagged reclaim-frontend.pages.dev as a suspected crypto drainer, a malicious website designed to trick users into unknowingly transferring cryptocurrency to attackers. These sites often mimic legitimate services or wallets, prompting users to connect their crypto wallets under false pretenses. Once connected, the drainer can silently approve and execute unauthorized token transfers, draining funds without further interaction from the victim. This domain specifically presents itself as a frontend for a legitimate-looking service, likely targeting users in the crypto space who may be less cautious about verifying URLs. The domain was registered through Cloudflare, Inc., which provides privacy protection and makes traditional WHOIS lookups less informative. VirusTotal currently shows 0 detections out of 95 scans, meaning no antivirus or security tool has yet flagged it as malicious—this is common for newly deployed threats or those using evasion tactics like fast-flux hosting or domain generation algorithms. The site resolves to the IP address 172.66.45.33 and uses an SSL certificate issued by Google Trust Services, which may give it an air of legitimacy at first glance, but these are easily obtainable and do not guarantee safety. If you have visited reclaim-frontend.pages.dev, especially if you connected a cryptocurrency wallet or entered any private keys or seed phrases, act immediately to secure your assets. Disconnect the wallet from any suspicious dApps or websites, revoke any unauthorized token approvals using tools like Etherscan’s approval checker or Revoke.cash, and move any remaining funds to a new, secure wallet. Consider using hardware wallets for long-term storage and never enter private keys or seed phrases on any website. Enable two-factor authentication on all crypto accounts and monitor transactions closely. Report the domain to PhishDestroy and your local cybersecurity authority to help prevent others from falling victim.