claimsportal[.]pages[.]dev

PhishDestroy identifies claimsportal.pages.dev as a high-risk crypto drainer threat, currently offline. This domain was designed to impersonate a legitimate claims portal, tricking users into connecting their wallets and draining cryptocurrency funds. The site was registered through Cloudflare Pages on March 12, 2026, and resolves to IP 188.114.97.3 with an SSL certificate from Let's Encrypt (E7). VirusTotal flags show 4 out of 95 security vendors marking this domain as malicious, and it appears on 3 security blocklists. Google Safe Browsing specifically flags it for phishing. The page title now reads "Suspected phishing site | Cloudflare," indicating Cloudflare has taken action to block access. These technical indicators confirm the domain was a sophisticated phishing operation targeting crypto users.

For users who may have interacted with claimsportal.pages.dev, immediate action is critical. Since this is a crypto drainer, any wallet connected to the site is compromised. Revoke all token approvals for that wallet using a revoke tool like Etherscan's token approval checker or Revoke.cash. Transfer remaining funds to a new, secure wallet that has never been connected to suspicious sites. Run a full antivirus scan on your device to check for any malware. Enable two-factor authentication on all crypto exchange accounts. Monitor your wallet activity for unauthorized transactions. Finally, report the domain to Cloudflare and Google Safe Browsing to help protect others. Never reconnect the compromised wallet to any service. Staying informed and cautious is the best defense against these evolving threats.