claimactsol[.]pages[.]dev

Analysis of claimactsol.pages.dev indicates that the domain was created on February 21, 2026 and is registered through Cloudflare, Inc. The domain resolves to the IP address 172.66.47.22, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presented the page title "Act I : The AI Prophecy" and was classified by threat intelligence as a crypto scam, specifically a crypto drainer. The TLS certificate is issued by Google Trust Services under the WE1 profile, and the site employed security technologies including HTTP Strict Transport Security (HSTS), Cloudflare services, and HTTP/3. An HTTP request returned a 403 status code, and the domain is currently taken offline.

VirusTotal scans show that three out of ninety‑three security vendors flagged the domain, and the domain appears on a single security blocklist. Independent analysis by Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the malicious assessment. The domain has been blocked by the PhishDestroy service. Uncertainties remain around the exact payload delivered to victims and the extent of any compromised cryptocurrency wallets, as no additional forensic artifacts have been publicly disclosed.

Defenders should add the domain and its resolving IP to outbound allow‑list exceptions, block the address at perimeter devices, and monitor for any attempts to contact the IP. Threat‑intel feeds should be updated to include the domain, its registrar, and the associated Cloudflare IP range. Continuous re‑evaluation is advised in case the site reappears under new subdomains or alternate hosting configurations.