intelmarketspresales[.]pages[.]dev

This domain, intelmarketspresales.pages.dev, is flagged for brand impersonation targeting the decentralized protocol 'across.' Analysis indicates the site presents itself as 'Intel Markets,' a fabricated entity designed to deceive users into believing it is affiliated with the legitimate 'across' brand. No specific drainer kit signatures have been identified, but the page structure and content align with typical phishing infrastructure used for credential harvesting or fraudulent token transfers. Infrastructure analysis reveals the domain was registered on March 07, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.44.184, hosted within AS13335 (Cloudflare, Inc.) in the United States. The domain is currently flagged by Google Safe Browsing as phishing, with 7 out of 95 security vendors on VirusTotal detecting it as malicious. Additionally, the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, further corroborating its malicious classification. As of the latest assessment, intelmarketspresales.pages.dev remains active, posing an ongoing risk to users. Response actions should include immediate blacklisting of the domain and IP across security gateways, as well as monitoring for related infrastructure reuse. The remaining risk is classified as high due to the domain's active status, brand impersonation tactics, and confirmed detections by multiple security vendors. Organizations are advised to block access to this domain and conduct user awareness training to mitigate exposure to similar threats.