chinacoinsclaimfix[.]pages[.]dev

This domain, chinacoinsclaimfix.pages.dev, is currently flagged as an active crypto drainer, a threat type designed to siphon cryptocurrency assets from victim wallets. The site presents itself under the title 'MainNet Project,' though no legitimate blockchain project has been confirmed to be associated with this domain. Analysis indicates the infrastructure is operational and actively targeting users through deceptive prompts to connect wallets, a common tactic in crypto drainer campaigns. Infrastructure analysis reveals the domain is hosted through Cloudflare, Inc., resolving to the IP address 172.66.44.215. The SSL certificate is issued by Google Trust Services, a common practice among malicious actors to lend an appearance of legitimacy. As of the latest scan, the domain has not been flagged by any of the 95 vendors on VirusTotal, indicating it remains undetected by major security engines. No historical blocklist data or creation date is publicly available for this subdomain, as it is part of a larger content delivery network that obscures direct registration details. The domain remains active and poses an ongoing risk to users who may be lured into interacting with it. Security teams are advised to monitor network traffic for connections to 172.66.44.215 and the domain chinacoinsclaimfix.pages.dev. End users should be cautioned against connecting wallets to unfamiliar sites, particularly those promising token claims or airdrops. Organizations may consider preemptive blocking of the domain and IP at the network level to mitigate exposure. Further investigation into the broader campaign infrastructure is recommended to identify related endpoints.