0000-wispy-dust-1495[.]fly[.]dev

The domain 0000-wispy-dust-1495.fly.dev has been identified as hosting a generic phishing threat, specifically a fake login page titled 'Webmail Portal'. This domain is currently active and appears to be involved in phishing campaigns targeting users' webmail credentials. As of now, there is no evidence of specific brand impersonation or use of a crypto drainer kit linked to this domain.

Technical analysis reveals that the domain resolves to IP address 66.241.125.233, located in the United States and operated by AS40509 Fly.io, Inc. The domain was registered through Cloudflare, Inc. and created on February 21, 2026. VirusTotal analysis shows that 13 out of 95 security vendors have flagged this domain as malicious. Furthermore, the domain has been blocked by one security entity and appears on one security blocklist. Notably, the domain does not have an SSL certificate, which is typical for phishing sites attempting to avoid detection.

The current status of 0000-wispy-dust-1495.fly.dev is active, illustrating a high risk of user credential compromise. Despite being blocked by a specific security entity, the domain remains operational, posing a continued threat. Organizations and individuals are advised to update their security tools to recognize this domain and employ robust email filtering solutions. Continuous monitoring and reporting of phishing domains like this one are essential to mitigate potential risks.