mnemonic-phrase-missing-word[.]pages[.]dev

This domain, mnemonic-phrase-missing-word.pages.dev, is confirmed to be a phishing site targeting seed phrase theft. The site impersonates a wallet recovery service, likely aiming to deceive users into revealing their mnemonic phrases, which are critical for accessing and securing cryptocurrency wallets.

Analysis indicates that mnemonic-phrase-missing-word.pages.dev has been detected by 1 out of 95 security vendors on VirusTotal, suggesting that it has evaded detection by most security tools. The domain was created on May 25, 2026, and is registered through Cloudflare, Inc., a common registrar for both legitimate and malicious sites. The SSL certificate is issued by Let's Encrypt, which provides free certificates and is often used by malicious actors to gain users' trust. The domain resolves to the IP address 172.66.46.230, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. This domain is currently active and appears on 1 security blocklist.

If users have visited this domain, they should immediately check their cryptocurrency wallets for any unauthorized activity. They should also consider changing their seed phrases and enabling multi-factor authentication on their wallet services. Users are advised to report the incident to their wallet provider and monitor their accounts for any suspicious transactions. It is crucial to avoid entering sensitive information on unverified websites and to verify the authenticity of any recovery processes through official channels.