claim-pimain[.]pages[.]dev

This domain, claim-pimain.pages.dev, is actively flagged as part of a crypto drainer phishing infrastructure. Registered on April 6, 2026, through Cloudflare, it resolves to the IP address 188.114.96.3 and presents a page title mimicking the Pi Network blockchain platform: 'Pi Blockchain, Community & Developer Platform | Pi Network.' The domain is currently blocked by at least one security provider and holds a trust score of 0/100, indicating high-risk classification. Analysis of available data shows it appears on one security blocklist, and 12 of 95 security vendors on VirusTotal have detected malicious activity associated with this domain. The SSL certificate is issued by Google Trust Services, which does not inherently indicate legitimacy due to the prevalence of SSL adoption among malicious domains. The domain's hosting on Cloudflare Pages aligns with common phishing tactics leveraging legitimate CDN services to evade detection. While the page title suggests an attempt to impersonate Pi Network, no further details about the exact content or functionality of the site are available for analysis. Defenders should treat this domain as high-risk and prioritize blocking or monitoring any connections to it, particularly in environments where cryptocurrency transactions or Pi Network-related activities occur. Additional investigation into associated wallet addresses or drainer scripts is recommended to assess the full scope of the threat.