gigachad-claim[.]pages[.]dev

PhishDestroy identifies the domain gigachad-claim.pages.dev as an active crypto_drainer impersonating an NFT claim portal. This malicious site leverages a fake 'gigachad' themed landing page to trick users into connecting their wallets, at which point the drainer kit silently siphons tokens and NFTs. The infrastructure and seed data (a0fe4a) align with recent campaigns targeting cryptocurrency users seeking free mints or exclusive drops.

This domain was registered through Cloudflare, Inc., resolving to IP 188.114.97.3 and secured with a Google Trust Services SSL certificate. VirusTotal analysis shows only 2 out of 95 security vendors currently flagging the domain, indicating low detection coverage despite its malicious nature. Additionally, this domain has been blocked by MetaMask and SEAL and appears on 2 separate threat intelligence blocklists, highlighting its active malicious status.

As of the latest assessment, gigachad-claim.pages.dev remains active and poses an elevated risk to users engaging with NFT-related content or free claim offers. Immediate response actions include blocking the domain at DNS and firewall levels, revoking any connected wallet permissions via blockchain explorers or wallet interfaces, and updating organizational blocklists. While current vendor detection remains sparse, users should remain cautious of similar themed domains and avoid interacting with unsolicited NFT claim links. The residual risk remains high due to the drainer's ability to bypass initial detection systems and the ongoing campaign activity.