poolz-finance-bng[.]pages[.]dev

The domain poolz-finance-bng.pages.dev is a generic phishing site designed to conduct staking scams, posing an elevated risk to users. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, poolz-finance-bng.pages.dev has been taken offline, though it previously operated as an active phishing page targeting cryptocurrency users.

Technical indicators confirm the malicious nature of poolz-finance-bng.pages.dev. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Gridinsoft, and appears on 4 security blocklists such as PhishDestroy, MetaMask, and ScamSniffer. Registered through Cloudflare, Inc. on July 29, 2024, it resolved to the IP address 188.114.96.3, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. Gridinsoft assigned it a trust score of 0/100, and the site employed technologies including HSTS, Cloudflare, and HTTP/3.

Users who interacted with poolz-finance-bng.pages.dev should immediately revoke any token approvals granted to suspicious contracts and transfer funds to a new wallet to mitigate potential losses. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the domain to relevant platforms, including Google Safe Browsing, MetaMask’s phishing detection, and local cybersecurity authorities, to aid in preventing further incidents.