wel-blokify-us-app[.]pages[.]dev

This domain, wel-blokify-us-app.pages.dev, is confirmed as an active phishing site targeting cryptocurrency users by impersonating Blockify, a decentralized platform. The threat type is credential harvesting with a focus on blockchain-related login credentials, as evidenced by the page title 'Blockify Login | Secure Access to Decentralized Freedom.' The site remains operational and poses a high risk to users seeking access to cryptocurrency wallets or decentralized applications. Analysis indicates the domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.44.164, located in California. The domain was created on April 30, 2026, though this date may reflect an error or spoofing, as it predates the current year. Security vendors on VirusTotal flagged the domain, with 1 out of 95 detecting it as malicious. It appears on a single security blocklist and is currently blocked by at least one threat intelligence feed. The SSL certificate is issued by Google Trust Services (WE1), a common feature in phishing infrastructure to mimic legitimacy. Infrastructure analysis reveals the domain remains active and continues to host phishing content. Users are advised to avoid interaction with this site and report it to relevant security teams. Organizations should update blocklists to include this domain and its associated IP address. Cryptocurrency platforms and wallet providers are encouraged to monitor for credential reuse from users who may have engaged with this phishing site.