Kiểm tra lừa đảo và bảo mật cho claim-brrr.pages.dev

This domain operates as a crypto airdrop scam, designed to deceive users into connecting wallets to fraudulent token distribution pages. The site mimics legitimate airdrop campaigns by displaying fabricated token symbols and countdown timers, pressuring victims to interact under false urgency. Analysis of the page title (Token_Symbol | Airdrop) confirms the impersonation of blockchain reward programs, a common tactic to harvest wallet credentials or deploy crypto drainer scripts. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 30, 2026, with an SSL certificate issued by Let's Encrypt (E8). It resolves to 188.114.96.3, a Cloudflare IP located in Canada. The domain appears on four security blocklists and is flagged by 1 of 95 vendors on VirusTotal, including detections from wallet security platforms. Despite minimal vendor alerts, the domain remains active and continues to host malicious content. Users who visited claim-brrr.pages.dev should immediately revoke any connected wallet permissions and check for unauthorized transactions. If credentials were entered, transfer assets to a new wallet and monitor for suspicious activity. Browser data should be cleared to remove cached redirects, and devices scanned for malware. All interactions with this domain should be treated as compromised, given the high-risk nature of crypto drainer threats.