8834g[.]pages[.]dev

This domain poses a direct financial threat to cryptocurrency users by impersonating the 1inch decentralized exchange platform. The site displays a fraudulent interface under the misleading page title 'Pendle - Liberating Yield,' designed to trick visitors into connecting wallets or entering sensitive credentials. Once accessed, the site may harvest private keys, seed phrases, or execute unauthorized transactions, leading to immediate asset theft. The combination of brand impersonation and cryptocurrency targeting elevates the risk, as stolen funds are typically irreversible and untraceable. Analysis indicates the domain was registered on February 26, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3, hosted on AS13335. Security vendors on VirusTotal have flagged the domain as malicious, with 8 out of 95 engines detecting it. The SSL certificate, issued by Google Trust Services (WE1), provides a false sense of security while the site remains active and unblocked by some detection systems. The domain appears on four security blocklists, including those maintained by cryptocurrency-focused threat intelligence sources, confirming its malicious intent. If this domain was visited, immediate action is required. Disconnect any connected wallets from the site and revoke all active sessions using a trusted blockchain explorer. Scan the device for malware, as phishing sites may deploy additional payloads. Monitor all linked accounts for unauthorized transactions and consider migrating assets to a new wallet if credentials were exposed. Report the domain to relevant security teams and avoid interacting with any links or pop-ups associated with 8834g.pages.dev. Users should verify domain authenticity by cross-referencing official communication channels before engaging with any cryptocurrency platform.