csegsregdhbbfdx[.]pages[.]dev

This domain, csegsregdhbbfdx.pages.dev, is identified as a cryptocurrency phishing site specifically targeting World Liberty Financial token (WLFI) holders. The site claims to offer token unlocking services, a common tactic used to deceive users into disclosing wallet credentials or transferring assets. As of the latest assessment, the domain has been taken offline, though prior activity indicates a deliberate attempt to impersonate the legitimate World Liberty Financial platform. Analysis indicates the domain was registered through Cloudflare, Inc. and resolves to the IP address 172.66.47.113. Despite its fraudulent nature, the domain has not been flagged by any of the 95 security vendors on VirusTotal, though it appears on four distinct security blocklists. The domain was created on April 25, 2026, and employs several technologies, including jsDelivr, HSTS, Google Analytics, Cloudflare Browser Insights, and HTTP/3. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the domain's malicious intent. Gridinsoft assigns the domain a trust score of 0 out of 100, further corroborating its fraudulent classification. The domain has been actively blocked by multiple security tools, including MetaMask, PhishDestroy, SEAL, and ScamSniffer. The current status of csegsregdhbbfdx.pages.dev is offline, though the infrastructure remains a potential risk for future reactivation or reuse. Users who may have interacted with this domain are advised to immediately revoke any connected wallet permissions, transfer assets to a secure wallet, and monitor accounts for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP address. Given the domain's use of Cloudflare infrastructure, further monitoring of similarly structured domains is recommended to preempt potential resurgence or copycat threats. The absence of detections on VirusTotal underscores the need for layered security measures, including real-time blocklist integration and user education on recognizing cryptocurrency phishing tactics.