0xinuarashi[.]dev

The domain 0xinuarashi.dev is under investigation for potential crypto drainer activities and is currently active. This domain does not impersonate a specific brand but is flagged for generic phishing. The domain is hosted by Cloudflare, Inc. and resolves to the IP address 104.21.69.45, located in the United States.

Analysis indicates that 0xinuarashi.dev has not been flagged by any of the 95 vendors on VirusTotal, suggesting it may be a relatively new or sophisticated threat. The domain appears on two security blocklists, PhishDestroy and Enkrypt, which could indicate early detection of malicious activities. The SSL certificate for the domain is not present, which is often a red flag for phishing sites as legitimate services typically use SSL to secure connections. The IP address 104.21.69.45 is associated with AS13335, Cloudflare, Inc., a common hosting service for both legitimate and malicious content. The domain's page title is '0xInuarashi', which does not match any known legitimate brand but could be a custom or obfuscated title used by the threat actors.

The current status of 0xinuarashi.dev is active, and it is recommended that users avoid accessing this domain to prevent potential crypto drainer attacks. Security teams and network administrators should consider adding this domain to their blocklists to protect their networks and users. Further investigation is warranted to determine the full scope of the threat and to identify any additional malicious infrastructure associated with this domain.