green-brook-6313[.]mumbaiboys1977[.]workers[.]dev

The domain green-brook-6313.mumbaiboys1977.workers.dev is a generic phishing site targeting cryptocurrency users. It does not impersonate a specific brand but operates as a cryptocurrency scam, likely designed to deceive victims into disclosing wallet credentials or transferring funds. As of analysis, the site has been taken offline, though it remains a documented threat.

Technical indicators confirm the domain's malicious nature. Green-brook-6313.mumbaiboys1977.workers.dev was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. It appears on 2 security blocklists, PhishDestroy and ScamSniffer, and was registered through Cloudflare, Inc. on February 21, 2026. The domain resolves to the IP address 104.21.73.177, hosted by Cloudflare in the US, and uses an SSL certificate issued by Google Trust Services / WE1. Technologies detected include jsDelivr, HSTS, and HTTP/3, with an observed page title of 'Document' and an HTTP status of 403.

Victims of green-brook-6313.mumbaiboys1977.workers.dev should immediately revoke any token approvals granted to suspicious contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions. Report the domain to relevant platforms, including ScamSniffer and PhishDestroy, and consider filing a complaint with local cybercrime authorities or organizations like the FBI’s Internet Crime Complaint Center (IC3).