ai-product-builder-1nu[.]pages[.]dev

This domain, ai-product-builder-1nu.pages.dev, is flagged as a generic phishing site targeting users with a fraudulent Korean-language lotto number generator interface. The page title "로또 번호 생성기" (Lotto Number Generator) suggests an attempt to lure victims into interacting with malicious content under the guise of a legitimate service. No specific brand impersonation or known drainer kit signatures have been identified at this stage, though the domain's structure and hosting pattern align with common phishing infrastructure. Analysis indicates the domain was registered through Cloudflare, Inc. on May 04, 2026, and currently resolves to the IP address 172.66.45.4, located in Canada under Cloudflare's network. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious sites leveraging Cloudflare's services. VirusTotal reports 0/95 detections, indicating no antivirus engines have flagged the domain as malicious at the time of this report. However, it appears on one security blocklist, specifically PhishDestroy, suggesting preliminary detection by at least one threat intelligence source. Google Safe Browsing (GSB) status is not explicitly provided but is presumed to be unlisted based on the current detection metrics. The domain remains active as of this analysis, with no takedown or mitigation actions observed. Users are advised to block the domain and its associated IP address (172.66.45.4) at the network level. Given the lack of widespread detection, organizations should monitor for further indicators of compromise, such as unexpected redirects or credential harvesting attempts originating from this domain. The risk level remains under investigation, and additional scrutiny is warranted due to the domain's recent creation date and the use of Cloudflare's infrastructure, which is frequently abused for phishing operations.