crypto-fomo[.]pages[.]dev

This domain, crypto-fomo.pages.dev, is flagged as a high-risk brand impersonation threat targeting Crypto.com. Analysis of the page title, 'FOMO - Portfolio Tracker,' indicates an attempt to deceive users into believing it is a legitimate cryptocurrency portfolio management tool associated with the Crypto.com brand. No explicit drainer kit signatures have been identified, but the domain exhibits characteristics consistent with credential harvesting and asset theft operations. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP 172.66.47.117, hosted on Cloudflare's network (AS13335). It was registered on December 09, 2024, through Cloudflare, Inc. and remains unflagged by VirusTotal, with a detection score of 0/95. The domain appears on three security blocklists, including PhishDestroy and MetaMask, and is secured with an SSL certificate issued by Google Trust Services (WE1). Google Safe Browsing (GSB) status is not explicitly provided but is likely flagged given its presence on multiple blocklists. As of the latest assessment, crypto-fomo.pages.dev remains active and poses a significant risk to users. Response actions by security providers have resulted in its inclusion on at least three blocklists, but its lack of detection on VirusTotal suggests it may still evade some automated defenses. Users are advised to avoid interacting with the domain, verify the legitimacy of any cryptocurrency-related tools through official channels, and report the domain to additional threat intelligence platforms to improve detection coverage.