v11.3 is using SSL for devfees. So if you are running a nodevfee you won't be getting those hashes. Claymore will. He's upped his game to get more shares from you! Just masking it will higher hashrates for his newer version.
Claymore did on v11.2, by the way phoenix miner has a lower devfee 0.65% and the tests i did showed phonexminer is legit on the devfee.
Also I must add that claymore long ago made a way to get the devfee even if you were using program to cheat it, the program could tell you a devfee share went to your address but claymore redirected other shares to his address based on devfee count, what claymore did is wrong but so are you people who tried to cheat using his program. So even if v11.2 added ssl and the cheating program says claymore is getting his devfee, you must understand that claymore always got his devfee no matter what version was.