x-verify-claim[.]pages[.]dev

PhishDestroy identifies x-verify-claim.pages.dev as an active crypto drainer domain hosting fraudulent infrastructure designed to steal cryptocurrency from unwitting users. The domain mimics legitimate verification services to trick victims into connecting wallets and approving malicious transactions. No established brand association is evident; instead, this appears to be a disposable phishing domain leveraging Pages.dev’s free hosting platform to distribute drainer scripts targeting blockchain users. This domain resolves to IP 188.114.97.3 and was registered through Cloudflare, Inc. It holds a Let’s Encrypt SSL certificate and carries a VirusTotal detection score of 2/95 security vendors. It appears on 2 public blocklists and is actively blocked by MetaMask and SEAL security systems. While the exact creation date is not disclosed in available intelligence, the domain’s recent activity and low detection count suggest it is a newly deployed threat vector optimized for evasion. As of the latest assessment, x-verify-claim.pages.dev remains active and poses an elevated risk to cryptocurrency users. Immediate avoidance is strongly advised. Users should not interact with this domain or any linked pages. Security teams and browser vendors are encouraged to block this domain at the network level using the provided IP and domain indicators. Although partially mitigated by major wallet providers, residual risk remains due to possible DNS or IP rotation. Continuous monitoring is recommended until definitive takedown occurs.