inibandit-bos[.]pages[.]dev

This domain, inibandit-bos.pages.dev, is currently under investigation for cryptocurrency phishing activity targeting wallet credentials and seed phrases. Analysis indicates no direct brand impersonation, suggesting a generic credential-harvesting or cryptocurrency drainer kit deployment. The infrastructure lacks specific branding, which is atypical for targeted phishing but consistent with opportunistic attacks against decentralized finance (DeFi) users or multi-chain wallet holders.

Technical indicators reveal the domain was registered on May 27, 2026, through Cloudflare Pages, a platform frequently abused for rapid phishing deployment due to its free hosting and automated provisioning. As of the latest scan, VirusTotal reports 0/95 detections, meaning no antivirus engines have flagged the domain yet, likely due to its recent creation or low visibility. The domain appears on one security blocklist, suggesting early detection by specialized feeds. No Google Safe Browsing (GSB) flags are present, and passive DNS records show no prior malicious associations with the underlying infrastructure.

Current status remains active, with the domain still resolving and serving content. Response actions include monitoring for additional blocklist inclusions and behavioral analysis of served payloads. The remaining risk is elevated due to the domain's operational status, lack of detections, and potential for hosting evolving phishing kits. Users are advised to treat this domain as malicious, avoid interaction, and verify wallet addresses through official channels. Organizations should preemptively block the domain at the network level and monitor for related subdomains or IP associations.