get-mubi[.]pages[.]dev

The domain get-mubi.pages.dev is identified as a high-risk generic phishing site. The page title 'MultiBit' suggests a potential attempt to impersonate a known brand, although no specific drainer kit has been identified. This domain is registered through Cloudflare, Inc., and resolves to the IP address 2606:4700:310c::ac42:2c7d, which is located in the United States and belongs to Cloudflare, Inc. (AS13335).

Analysis indicates that get-mubi.pages.dev has been flagged by 3 out of 95 security vendors on VirusTotal, with a score of 3/95. The domain was created on April 23, 2024, and is currently listed on 3 security blocklists: PhishDestroy, ScamSniffer, and Enkrypt. The SSL certificate is issued by Google Trust Services / WE1, which may add a layer of perceived legitimacy to the site. The domain's infrastructure, including its registration and IP address, is consistent with known tactics used by phishing actors to quickly deploy and maintain malicious sites.

The domain remains active as of the latest analysis, posing a significant risk to unsuspecting users who may be directed to this site. Recommended response actions include blocking the domain at the network level and educating users about the risks associated with generic phishing sites. Despite the current blocklist entries, the domain's SSL certificate and Cloudflare infrastructure suggest that it may continue to evade detection, necessitating ongoing monitoring and proactive mitigation measures.