omcgasketsealingcompound2[.]pages[.]dev

This domain, omcgasketsealingcompound2.pages.dev, is under investigation for brand impersonation targeting Compound, a financial technology platform. The page title, "Omc Gasket Sealing Compound," suggests an attempt to mimic legitimate branding while presenting unrelated or deceptive content. No drainer kit signatures have been identified at this stage, though further analysis of the page structure and scripts is ongoing to determine potential credential harvesting or fraudulent transaction mechanisms.

Technical indicators reveal the domain was registered on April 06, 2026, through Cloudflare, Inc., and currently resolves to the IP address 172.66.44.52, geolocated to a Cloudflare node in Canada. VirusTotal returns 0/95 detections, indicating no antivirus engines have flagged the domain as malicious at the time of analysis. The SSL certificate is issued by Google Trust Services (WE1), a common provider for Cloudflare-hosted domains. The domain appears on one security blocklist, specifically PhishDestroy, while Google Safe Browsing has not yet classified it as a threat.

The domain remains active, with no takedown or sinkholing actions observed. Given the lack of detections on VirusTotal and limited blocklist coverage, the risk of widespread detection evasion persists. Users are advised to treat any interaction with this domain as potentially fraudulent, particularly if soliciting credentials, financial details, or software downloads. Organizations should monitor for phishing campaigns leveraging this domain and update web filtering rules to block access. Further investigation into associated infrastructure and historical DNS records is recommended to identify related threat activity.