xbo-com-platform[.]pages[.]dev

PhishDestroy identifies xbo-com-platform.pages.dev as a crypto drainer phishing domain actively distributing fake login pages to steal cryptocurrency wallet credentials. This Cloudflare-registered domain (via registrar Cloudflare, Inc.) currently resolves to IP address 188.114.96.3 and uses a Google Trust Services SSL certificate to appear legitimate. The fraudulent site masquerades as a login portal, targeting users seeking to interact with XBO services to harvest private keys or seed phrases under the guise of authentication or account access.

This domain (fb6347 seed) remains undetected by VirusTotal with 4 out of 95 security engines flagging it, indicating low visibility in automated threat feeds despite its active phishing campaign. Registrar data shows Cloudflare as the provider, which enables rapid deployment and abuse of pages.dev subdomains. The absence of detections suggests this threat may currently fly under the radar of many security systems, increasing the risk of successful credential theft or asset drain from unsuspecting victims.

If you visited xbo-com-platform.pages.dev or entered any credentials, immediately revoke wallet access, transfer funds to a new wallet, and generate a new seed phrase. Do not reuse passwords across services. Scan your device with reputable antivirus software. Report the domain to PhishDestroy for investigation and block it in your browser and firewall. Use only official XBO platform URLs published directly from their verified domains to avoid falling victim to similar impersonation attacks.