bananagun-bhs[.]pages[.]dev

This domain, bananagun-bhs.pages.dev, poses as a legitimate cryptocurrency trading dashboard associated with Banana Gun, a known trading tool. The site is designed to deceive users into entering sensitive credentials, such as wallet private keys or exchange login details, under the pretense of accessing a trading interface. Given the context of cryptocurrency phishing, victims risk immediate financial loss if credentials are compromised, as transactions on blockchain networks are irreversible. The page title, 'Banana Gun Dashboard,' directly mimics the branding of the legitimate service, increasing the likelihood of successful deception among users familiar with the platform. Analysis indicates this domain was created on April 04, 2026, and is registered through Cloudflare, Inc., a common choice for both legitimate and malicious infrastructure due to its privacy and security features. As of the latest investigation, the domain resolves to the IP address 188.114.97.3, which is associated with Cloudflare's network. VirusTotal reports 0 detections out of 95 security engines, suggesting the domain has not yet been widely flagged by automated systems. However, it appears on one security blocklist, specifically PhishDestroy, indicating prior suspicion or detection by at least one specialized threat intelligence source. The SSL certificate is issued by Google Trust Services, which, while providing encryption, does not validate the legitimacy of the site's content or intent. Users who have visited bananagun-bhs.pages.dev or entered any credentials on the site should take immediate action to mitigate potential risks. First, disconnect any wallets or devices that may have interacted with the domain to prevent further unauthorized access. Next, assume all entered credentials are compromised and revoke access to any associated accounts or wallets, particularly those linked to cryptocurrency. Monitor connected accounts for unauthorized transactions and enable additional security measures, such as two-factor authentication, where available. If financial assets were transferred, report the incident to relevant authorities and the platform from which funds were taken. Finally, scan the device used to access the site for malware, as phishing pages may deploy additional payloads to maintain persistence or exfiltrate further data.