greenbitcoin-claiim[.]pages[.]dev

PhishDestroy identifies greenbitcoin-claiim.pages.dev as an active crypto drainer impersonating Bitcoin to steal digital assets. This fraudulent site resolves to IP 188.114.97.3 and holds an SSL certificate issued by Google Trust Services, attempting to appear legitimate. The domain was flagged by 1 out of 95 security vendors on VirusTotal and already appears on 2 security blocklists including Enkrypt and ScamSniffer, indicating widespread recognition as a threat. This domain was registered through Cloudflare, Inc., leveraging the service’s infrastructure to obscure its true origins while targeting unsuspecting users interested in Bitcoin. The specific threat involves crypto drainer functionality, where visitors’ wallet connections are compromised to silently transfer funds without consent. The combination of low detection on VirusTotal (1/95) and immediate blocking by multiple browser extensions highlights the deceptive nature of this site, which is designed to mimic legitimate Bitcoin-related services. If you have visited greenbitcoin-claiim.pages.dev, immediately disconnect your wallet, revoke any connected permissions, and transfer remaining assets to a secure wallet. Scan your system for malware and change passwords linked to crypto accounts. Verify all links and domains using PhishDestroy before entering any credentials or connecting wallets to prevent irreversible financial loss.