maker-mkr-dao-com[.]pages[.]dev

This domain, maker-mkr-dao-com.pages.dev, is identified as an active credential harvesting platform specifically targeting users of MakerDAO, a decentralized finance protocol governing the Dai stablecoin and MKR token. Analysis indicates the site employs brand impersonation techniques, presenting a cloned interface of the legitimate MakerDAO governance portal to deceive victims into submitting wallet credentials or private keys. The threat type is classified as high-risk due to its direct targeting of cryptocurrency assets and active status. Infrastructure analysis reveals the domain was provisioned through Cloudflare Pages on March 28, 2026, and currently resolves to the IP address 188.114.96.3, geolocated to a Cloudflare node in Canada. Detection metrics show minimal coverage, with only 1 out of 95 security vendors flagging the domain on VirusTotal. The site appears on a single security blocklist, specifically PhishDestroy, while remaining unlisted on broader threat intelligence feeds. The SSL certificate is issued by Let's Encrypt, serial number E7, providing HTTPS encryption that may lend false legitimacy to unsuspecting users. As of the latest verification, the phishing page remains operational, displaying the title 'MakerDAO (MKR) | Dai Stablecoin & DeFi Governance' to mimic the authentic platform. No takedown actions have been observed, and the domain continues to resolve without interruption. The remaining risk is substantial due to the combination of low detection rates, active hosting, and direct targeting of cryptocurrency holders. Users are advised to verify domain authenticity through official MakerDAO communication channels and employ hardware-based wallet authentication to mitigate credential exposure risks.