dogeverseclaimed[.]pages[.]dev

This domain, dogeverseclaimed.pages.dev, operates as a crypto drainer phishing site designed to deceive users into connecting their cryptocurrency wallets under the pretense of a multichain token claim. Once a user authorizes a transaction, the site executes unauthorized smart contract interactions to siphon funds directly from the victim’s wallet. The page title, 'Dogeverse | Making Doge Memes Multichain,' is used as social engineering bait to exploit interest in meme-based cryptocurrency projects, a common tactic in high-risk phishing campaigns. Analysis indicates the domain was registered on June 05, 2024, through Cloudflare, Inc., and resolves to the IP address 172.66.44.244. It is flagged by 13 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on four security blocklists and is actively blocked by multiple wallet protection tools. Detected technologies include Google Tag Manager, Google Analytics, and HTTP/3, suggesting an attempt to mimic legitimate marketing practices while concealing malicious intent. The SSL certificate is issued by Google Trust Services, which does not mitigate the underlying threat. If a user visited this domain and connected a wallet, immediate action is required. Disconnect the wallet from all unknown dApps via the wallet interface. Revoke any suspicious smart contract approvals using a blockchain explorer or a token approval revocation tool. Monitor the wallet for unauthorized transactions and consider transferring remaining funds to a new, secure wallet. Users should also scan their devices for malware, as phishing sites may deploy additional payloads. Report the incident to relevant security platforms to contribute to threat intelligence sharing.