bidds-landing-page[.]pages[.]dev

This domain is flagged as a phishing site targeting users of Coreum, a blockchain platform. The page title 'Your Leading Coreum' suggests an attempt to impersonate official Coreum wallet or service interfaces, likely aiming to harvest credentials, private keys, or other sensitive cryptocurrency-related information. The domain appears designed to exploit users seeking Coreum wallet access or support, presenting a fraudulent interface to deceive victims into disclosing authentication details or transferring assets to attacker-controlled addresses. Analysis indicates the domain was registered on March 29, 2026, through Cloudflare, Inc., and currently resolves to IP address 172.66.46.225, hosted on Cloudflare infrastructure in Canada. Despite its recent creation, the domain has been blocked by one security blocklist and flagged by PhishDestroy, though it remains undetected by VirusTotal with 0/95 security vendors marking it as malicious. The SSL certificate, issued by Google Trust Services (WE1), provides a false sense of legitimacy, while the use of Cloudflare hosting obscures the true origin of the phishing infrastructure. Users who have visited this domain or interacted with its content should immediately cease all engagement and revoke any permissions granted to associated applications or browser extensions. If credentials or private keys were entered, affected users must transfer assets to a new, secure wallet and monitor accounts for unauthorized transactions. Browser data, including cookies and cached files, should be cleared to remove any residual tracking mechanisms. Network administrators are advised to block the domain and its resolving IP address (172.66.46.225) at the perimeter to prevent further access. Given the domain's active status and lack of widespread detection, heightened vigilance is recommended for users of Coreum-related services.