claim-sniffer[.]pages[.]dev

PhishDestroy identifies claim-sniffer.pages.dev as an active airdrop impersonation domain designed to deceive cryptocurrency users into surrendering sensitive wallet credentials or transferring digital assets under false pretenses. This site masquerades as a legitimate token airdrop platform with a page title 'Token_Symbol | Airdrop,' exploiting trust in established blockchain ecosystems to lure victims. The domain leverages Cloudflare’s infrastructure and a Let’s Encrypt SSL certificate to appear legitimate, while hosting content that closely mimics official airdrop campaigns from well-known projects. As of the latest analysis, this threat remains operational and continues to evolve its tactics to bypass detection. This domain was flagged by PhishDestroy using seed 28ed70, revealing key technical indicators that confirm its malicious intent. The site resolves to IP address 172.66.44.89 and shows zero detections on VirusTotal (0/95 scanners), indicating a low current detection rate despite clear signs of brand impersonation. It is registered through Cloudflare, Inc., which provides anonymity and operational resilience to threat actors. While the exact creation date is not publicly disclosed, the domain remains active and unlisted on major blocklists, allowing it to persist in the threat landscape with minimal interference. Users who have visited claim-sniffer.pages.dev or interacted with its content should immediately assess their exposure and take precautionary steps. If any cryptocurrency wallet credentials, private keys, or seed phrases were entered on this site, those wallets should be considered compromised, and funds should be moved to a new, secure wallet immediately. Enable two-factor authentication on all related accounts and monitor transaction history for unauthorized activity. Report the domain to your cybersecurity provider or relevant authorities such as the FBI’s IC3 or local cybercrime units. Avoid reusing passwords or wallet recovery phrases across platforms, and consider using hardware wallets for enhanced security. Stay vigilant against similar airdrop scams by verifying official project websites and communication channels before engaging with any crypto-related offers.