sigmabot[.]pages[.]dev

The domain sigmabot.pages.dev has been identified as a potential crypto drainer threat and is currently under investigation. The domain's status is offline, and it was found with the page title 'DebbugDappNode', which suggests a possible intent to deceive users into interacting with a fraudulent application or service.

According to the collected data, the domain was not flagged by any of the 95 vendors on VirusTotal at the time of analysis, indicating it may not yet be widely recognized by security engines. The domain was registered through Cloudflare, Inc. and resolves to the IP address 172.66.44.169. The SSL certificate in use is issued by Let's Encrypt, further employing technologies such as HSTS, Cloudflare, and HTTP/3 to enhance its operational security. The domain was created on March 31, 2026, and appears on one security blocklist, specifically blocked by PhishDestroy. The Gridinsoft trust score is notably low at 0/100, highlighting a lack of trustworthiness.

Currently, the domain is offline, but its presence on a security blocklist and low trust score indicate potential risks if reactivated. Users are advised to remain cautious and avoid engaging with this domain or any similar suspicious sites. It is recommended to keep security software updated and to use multi-factor authentication where possible to mitigate risks associated with credential theft or potential crypto-draining activities. Organizations should consider monitoring traffic to and from this domain's associated IP addresses to prevent any unauthorized data exchanges.