claim-sniffer[.]pages[.]dev
“Token_Symbol | Airdrop”
Ringkasan bukti
PhishDestroy identifies claim-sniffer.pages.dev as an active airdrop impersonation domain designed to deceive cryptocurrency users into surrendering sensitive wallet credentials or transferring digital assets under false pretenses. This site masquerades as a legitimate token airdrop platform with a page title 'Token_Symbol | Airdrop,' exploiting trust in established blockchain ecosystems to lure victims. The domain leverages Cloudflare’s infrastructure and a Let’s Encrypt SSL certificate to appear legitimate, while hosting content that closely mimics official airdrop campaigns from well-known projects. As of the latest analysis, this threat remains operational and continues to evolve its tactics to bypass detection. This domain was flagged by PhishDestroy using seed 28ed70, revealing key technical indicators that confirm its malicious intent. The site resolves to IP address 172.66.44.89 and shows zero detections on VirusTotal (0/95 scanners), indicating a low current detection rate despite clear signs of brand impersonation. It is registered through Cloudflare, Inc., which provides anonymity and operational resilience to threat actors. While the exact creation date is not publicly disclosed, the domain remains active and unlisted on major blocklists, allowing it to persist in the threat landscape with minimal interference. Users who have visited claim-sniffer.pages.dev or interacted with its content should immediately assess their exposure and take precautionary steps. If any cryptocurrency wallet credentials, private keys, or seed phrases were entered on this site, those wallets should be considered compromised, and funds should be moved to a new, secure wallet immediately. Enable two-factor authentication on all related accounts and monitor transaction history for unauthorized activity. Report the domain to your cybersecurity provider or relevant authorities such as the FBI’s IC3 or local cybercrime units. Avoid reusing passwords or wallet recovery phrases across platforms, and consider using hardware wallets for enhanced security. Stay vigilant against similar airdrop scams by verifying official project websites and communication channels before engaging with any crypto-related offers.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com |
malicious | Sinkholed |
| DNS4EU | aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
7 sumber eksternal dipantau Tidak cocok
Linimasa deteksi
-
Status domain
Dapat dijangkau → Tidak dapat dijangkau
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of claim-sniffer.pages.dev · checked Apr 15, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive