# bitbox02-review.pages.dev — SUSPICIOUS

> bitbox02-review.pages.dev is a phishing domain impersonating Shift Crypto's Hardware Wallet. Flagged by 0 of 95 VirusTotal vendors, users should avoid entering.

## Summary
This domain, bitbox02-review.pages.dev, is currently under active investigation for impersonating Shift Crypto's BitBox02 hardware wallet in a phishing campaign targeting cryptocurrency users. The threat type has been classified as generic_phishing due to its attempt to deceive victims into divulging wallet credentials or downloading malicious firmware. The domain is hosted on Cloudflare Pages with a Let's Encrypt SSL certificate, increasing its legitimacy appearance while actively operating to harvest sensitive data from unsuspecting users.

PhishDestroy identifies this domain as a high-risk phishing site with zero detections among 95 VirusTotal vendors, indicating it remains under the radar of most automated security systems. Registered through Cloudflare, Inc., the domain resolves to IP 188.114.97.3 via Cloudflare's proxy network. The SSL certificate issued by Let's Encrypt provides a false sense of security, tricking users into believing the site is legitimate. As of the latest scan, the domain remains unlisted on major threat intelligence blocklists, contributing to its deceptive credibility among potential victims.

Users are strongly advised to avoid interacting with bitbox02-review.pages.dev or entering any sensitive information, including wallet seeds, passwords, or personal details. Cryptocurrency holders should verify hardware wallet purchase or firmware update sources exclusively through Shift Crypto's official website or authorized resellers. Network administrators are urged to block the domain at the DNS level and report this threat via PhishDestroy's reporting system. This domain serves as a reminder that cloud hosting platforms and free SSL certificates can be weaponized by threat actors to enhance phishing attack success rates, requiring heightened user vigilance and proactive security measures.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/bitbox02-review.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/bitbox02-review.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/bitbox02-review.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bitbox02-review.pages.dev/
Last updated: 2026-04-10