okdegens-frontend[.]pages[.]dev

This domain is flagged as a high-risk phishing endpoint specifically designed to compromise cryptocurrency wallet credentials. Analysis indicates the site impersonates legitimate wallet interfaces, tricking users into exposing private keys or seed phrases through deceptive input forms. The threat type is classified as crypto-phishing, with a focus on credential harvesting rather than traditional financial fraud. Infrastructure analysis reveals the domain okdegens-frontend.pages.dev was registered through Cloudflare on August 25, 2022, and resolves to IP address 188.114.96.3 (AS13335, United States). The SSL certificate is issued by Google Trust Services (WE1). Security validation shows 12 out of 95 engines on VirusTotal detect malicious activity, while three independent blocklists have listed the domain. Additional flags include Google Safe Browsing's phishing classification and confirmed blocks by cryptocurrency security layers. The page title 'Suspected phishing site | Cloudflare' further confirms its deceptive nature. Mitigation requires immediate domain isolation and credential rotation for any exposed accounts. Network administrators should block the IP 188.114.96.3 and implement DNS filtering to prevent resolution. End users must verify wallet interfaces against official sources, avoid entering seed phrases on unfamiliar sites, and enable hardware-based authentication where available. Cryptocurrency holders should monitor transaction histories for unauthorized activity and report any exposure to relevant security teams for forensic analysis.