buildonbob-registrations[.]pages[.]dev

This domain, buildonbob-registrations.pages.dev, is actively engaged in brand impersonation targeting the Across decentralized finance (DeFi) protocol. Analysis of the page title, "BOB - Gateway for Bitcoin DeFi," and associated infrastructure reveals an intent to deceive users into believing they are interacting with the legitimate Across platform. The domain mimics Across’s branding to facilitate fraudulent activities, likely including crypto asset theft or phishing for sensitive credentials. No evidence of a drainer kit was explicitly identified, but the impersonation framework aligns with common tactics used in crypto-related scams. Infrastructure analysis provides concrete technical indicators of malicious activity. The domain is flagged by 13 out of 95 security vendors on VirusTotal, indicating a high likelihood of fraudulent behavior. It was registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.164, hosted on Cloudflare’s network (AS13335). The domain was created on November 20, 2025, suggesting recent deployment for malicious purposes. Google Safe Browsing has classified the domain as phishing, and it appears on two security blocklists. Notably, the domain lacks an SSL certificate, a red flag for user security in financial or crypto-related contexts. As of the latest assessment, the domain remains active and poses a significant risk to users. Response actions by security providers, including PhishDestroy and ScamSniffer, have blocked access, but the domain continues to resolve and may evade detection in less protected environments. The remaining risk is classified as high due to the domain’s active status, lack of SSL encryption, and continued impersonation of a trusted DeFi platform. Users are advised to avoid interaction with the domain, verify URLs through official sources, and employ browser-based security tools to block known phishing infrastructure. Organizations should update blocklists to include this domain and monitor for related indicators of compromise.