bitbama[.]pages[.]dev

This domain is assessed as high risk and is classified as a generic phishing threat. Analysis indicates that bitbama.pages.dev remains active and presents characteristics commonly associated with phishing infrastructure, including the potential collection of credentials, wallet information, authentication data, or other sensitive user inputs through deceptive web content. The observed status indicates the resource is still operational and should be treated as untrusted.

Infrastructure analysis reveals that the domain resolves to IP address 172.66.47.101 and is registered through Cloudflare, Inc. Registration records show a creation date of May 04, 2024. The domain currently appears on 5 security blocklists and has been blocked by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. Detection telemetry shows that 1 of 95 VirusTotal vendors currently flags the domain. The site uses an SSL certificate issued by Google Trust Services / WE1 and is hosted in the US on AS13335 Cloudflare, Inc. The page title observed during analysis is "Stake Bama Token | Bitbama". While HTTPS is present, certificate deployment alone does not indicate legitimacy.

Current risk assessment remains high due to active status combined with blocklist presence across multiple security sources. Access to the domain should be restricted through DNS, web filtering, email security, and endpoint controls. Users should avoid entering credentials, authentication codes, wallet details, or financial information. Security teams should monitor network logs for connections to 172.66.47.101, investigate any historical interactions, and review affected accounts for unauthorized activity. Continued monitoring is recommended because phishing infrastructure may rapidly change content while maintaining the same domain.