bitbox02-review[.]pages[.]dev

This domain, bitbox02-review.pages.dev, is under investigation for cryptocurrency wallet phishing activity targeting users of the BitBox02 hardware wallet. The site presents itself as an independent review and setup guide, likely designed to deceive visitors into disclosing sensitive wallet credentials or downloading malicious software. Current status remains active, with no confirmed takedown or mitigation measures observed. Analysis indicates the domain was registered through Cloudflare, Inc. on April 09, 2026, an unusually future date suggesting potential domain spoofing or misconfiguration. It resolves to IP address 188.114.97.3, hosted in Canada under Cloudflare infrastructure. The domain appears on 1 security blocklist (PhishDestroy) but has not been flagged by any of the 95 VirusTotal detection engines as of the latest scan. The SSL certificate is issued by Let's Encrypt with serial number E8, providing encrypted connections that may lend false legitimacy to the site. Current infrastructure remains operational, with no signs of remediation. Organizations should immediately add bitbox02-review.pages.dev to network blocklists at the DNS and proxy levels. Security teams are advised to monitor for connections to 188.114.97.3 and inspect any associated downloads for wallet-themed malware. End users should be alerted to verify official BitBox02 communications through the vendor’s authenticated channels only, as this domain exhibits clear indicators of brand impersonation.