fetch-ai-migration-claim[.]pages[.]dev

The domain fetch-ai-migration-claim.pages.dev has been identified as a crypto drainer, a specialized form of phishing infrastructure designed to deplete cryptocurrency wallets by tricking users into signing malicious transactions. This domain impersonates Fetch AI, an open platform for building AI applications, to exploit trust in the brand and lure victims into interacting with fraudulent smart contracts. As of the latest analysis, the domain is offline, though its prior activity remains a documented threat to users of decentralized finance and cryptocurrency services. Analysis of the domain reveals multiple technical indicators of malicious intent. The domain is flagged by 4 of 95 security vendors on VirusTotal, with additional detections by PhishDestroy, Enkrypt, and ScamSniffer. It resolves to the IP address 172.66.47.161 and was registered through Cloudflare, Inc. on March 25, 2026, an anomalous creation date likely intended to evade temporal detection heuristics. The domain appears on three security blocklists, and its trust scores are critically low, with Gridinsoft assigning a 0/100 rating and Scamadviser providing a 6/100 score. Infrastructure analysis indicates the use of Cloudflare hosting, HTTP/3, and HSTS, alongside a Google Trust Services SSL certificate, which may lend a superficial appearance of legitimacy. The current status of fetch-ai-migration-claim.pages.dev is offline, though the threat posed by similar crypto drainer campaigns remains elevated. Users are advised to verify domain authenticity before interacting with any cryptocurrency-related prompts, particularly those involving wallet connections or transaction signatures. Security teams should monitor for domains impersonating Fetch AI or other blockchain platforms, with particular attention to those leveraging Cloudflare Pages infrastructure. Blocking the IP address 172.66.47.161 and implementing real-time URL filtering for known malicious patterns are recommended mitigations. Wallet providers and decentralized application developers should integrate transaction simulation tools to alert users of potential asset-draining risks prior to execution.