dflow-claims[.]pages[.]dev

PhishDestroy identifies dflow-claims.pages.dev as an active crypto drainer scam designed to trick users into connecting cryptocurrency wallets, resulting in unauthorized fund transfers. This domain mimics legitimate services to exploit unsuspecting victims, leveraging deceptive tactics to drain digital assets without direct user consent. The threat is specifically engineered for crypto theft, making it a high-risk domain for blockchain users. This domain has been flagged across two security blocklists and is currently blocked by Enkrypt and ScamSniffer, indicating widespread recognition of its malicious nature. Registered through Cloudflare, Inc., the domain resolves to IP 172.66.47.53 and holds an SSL certificate issued by Google Trust Services, giving it a false appearance of legitimacy. VirusTotal analysis shows 15/95 security engines detecting the threat, highlighting how evasive this crypto drainer remains despite its active operation. Users who visited dflow-claims.pages.dev should immediately revoke any wallet connections made through this domain and transfer remaining assets to a new wallet. Scan connected devices for malware and monitor blockchain transactions for unauthorized activity. Report the domain to relevant authorities and security platforms to help prevent further victimization. Exercise extreme caution with unsolicited crypto-related links and always verify URLs before engagement.