moonbag-claim[.]pages[.]dev

PhishDestroy identifies moonbag-claim.pages.dev as an elevated-risk crypto drainer domain actively impersonating legitimate cryptocurrency services. This domain specifically targets users by tricking them into connecting wallets or entering recovery phrases under false pretenses, such as claiming tokens or rewards. Once connected, the domain exploits wallet permissions to drain funds or steal credentials without explicit confirmation from the victim.

This domain was flagged by 12 of 95 security vendors on VirusTotal, indicating widespread recognition of its malicious intent. Registered through Cloudflare, Inc., the domain uses a Google Trust Services SSL certificate to appear legitimate and resolves to IP 172.66.47.18. Its active status suggests it is currently operational and posing a real threat to unsuspecting users.

If you visited moonbag-claim.pages.dev, immediately disconnect your wallet from the site, revoke any granted permissions, and transfer remaining assets to a new wallet. Check transaction history for unauthorized transfers and consider reporting suspicious activity to your wallet provider or relevant authorities. Avoid interacting with any links or prompts from this domain to prevent further compromise.