degenwheel[.]pages[.]dev

This domain, degenwheel.pages.dev, is identified as a high-risk phishing site specifically designed to compromise cryptocurrency wallet credentials and private keys. Analysis indicates the domain impersonates legitimate wallet interfaces, tricking users into entering sensitive information such as seed phrases or passwords. The infrastructure is engineered to resemble trusted platforms, increasing the likelihood of successful social engineering attacks against targets in the cryptocurrency ecosystem. Infrastructure analysis reveals the domain was registered on August 11, 2023, through a registrar associated with Cloudflare, Inc. It resolves to the IP address 172.66.47.133, hosted on autonomous system AS13335. The domain appears on three independent security blocklists and is flagged by 11 out of 95 security vendors on VirusTotal. Additionally, it is classified as a phishing threat by Google Safe Browsing. The SSL certificate, issued by Google Trust Services (WE1), further confirms its use of encrypted connections to lend an appearance of legitimacy. Users who visited degenwheel.pages.dev or interacted with its content should immediately cease all engagement and revoke any permissions granted to the site. If credentials or private keys were entered, affected wallets must be considered compromised. Users are advised to transfer assets to a new wallet with a fresh seed phrase, conduct a full malware scan on their devices, and monitor for unauthorized transactions. Any extensions or applications linked to the domain should be removed, and browser caches cleared to eliminate residual threats.