claims-thentwrk[.]pages[.]dev

The domain claims-thentwrk.pages.dev is identified as a high-risk crypto drainer and is currently active. It is impersonating the Pudgy Penguins collectible brand, specifically the “GoldFeathers” collectible.

Infrastructure analysis reveals that the domain is registered through Cloudflare, Inc. and resolves to the IP address 188.114.97.3, which is located in the United States (US) under the Autonomous System Number (ASN) AS13335, operated by Cloudflare, Inc. The domain was created on March 09, 2024, and is secured with an SSL certificate issued by Google Trust Services / WE1. Despite its presence on three security blocklists—PhishDestroy, ScamSniffer, and Enkrypt—the domain has not yet been flagged by any of the 95 vendors on VirusTotal, indicating a potential for undetected malicious activity.

Currently, the domain remains active and poses a significant threat to users interacting with it. Security analysts recommend that network administrators and security teams actively block this domain to prevent potential crypto drainer attacks. Users should be advised to avoid clicking on links or entering any sensitive information on this site, and to verify the authenticity of any Pudgy Penguins collectible pages through official channels. Continuous monitoring is also advised to track any changes in the domain's activity or infrastructure.