polkadotcoklat[.]pages[.]dev

The domain polkadotcoklat.pages.dev is a generic phishing site posing an elevated risk. It does not impersonate a specific brand or deploy a known crypto drainer kit but presents itself as a premium chocolate retailer targeting Indonesian users. The site is currently taken offline, reducing immediate threat exposure, though prior activity may have targeted victims through deceptive login or payment pages.

Technical indicators confirm polkadotcoklat.pages.dev as malicious. VirusTotal reports 3 of 95 security vendors flagged the domain, including ChainPatrol and alphaMountain.ai. It appears on 3 security blocklists (PhishDestroy, MetaMask, and SEAL) but remains unflagged by Google Safe Browsing. The domain was registered through Cloudflare, Inc. on September 02, 2020, and resolves to IP address 172.66.44.83, hosted by Cloudflare in the US. The SSL certificate is issued by Google Trust Services (WE1), and observed technologies include HSTS, Cloudflare, and HTTP/3. The page title previously displayed 'SURGA898 - Toko Coklat Premium Terbaik di Indonesia dari polkadot official', and the site returned a 403 HTTP status before going offline.

Users who interacted with polkadotcoklat.pages.dev should assume credentials or payment details may have been compromised. Change passwords for any accounts accessed via the site, enable two-factor authentication, and monitor financial statements for unauthorized transactions. Report the domain to local cybercrime authorities or platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. If crypto wallet interactions occurred, revoke token approvals and transfer funds to a new wallet as a precaution.