sensational-salmiakki-0285cb[.]netlify[.]app

This domain is identified as a cryptocurrency phishing operation targeting users through fraudulent wallet interfaces or credential harvesting pages. Analysis indicates the infrastructure is designed to mimic legitimate blockchain services, likely to steal private keys, recovery phrases, or login credentials. The domain currently displays a 'Site not found' page, which may indicate either a temporary takedown of the phishing content or a cloaking mechanism to evade detection during automated scans. Infrastructure analysis reveals the domain was registered through Netlify on March 11, 2026, and resolves to the IP address 98.84.224.111, hosted on Amazon.com, Inc. (AS14618) infrastructure. It is flagged by 5 out of 95 security vendors on VirusTotal and appears on 3 independent security blocklists. The domain holds a valid SSL certificate issued by DigiCert Inc, which may lend a false sense of legitimacy to unsuspecting users. Notably, the domain is actively blocked by multiple cryptocurrency-focused security tools, further confirming its association with malicious activity. Users who have visited sensational-salmiakki-0285cb.netlify.app should assume their credentials or wallet information may have been compromised. Immediate actions include revoking any connected wallet sessions, generating new private keys or recovery phrases, and monitoring accounts for unauthorized transactions. System scans using updated security tools are recommended to detect potential malware infections. If financial assets were exposed, affected parties should report the incident to relevant financial institutions or blockchain security response teams for further mitigation.