stake-us-vip-telegram[.]pages[.]dev

This domain is flagged as a high-risk crypto drainer, a threat type designed to siphon cryptocurrency from connected wallets without user consent. Crypto drainers operate by exploiting wallet permissions or deceiving users into signing malicious transactions, often resulting in irreversible asset loss. The domain's infrastructure and recent activity align with known drainer campaigns targeting cryptocurrency holders. Analysis indicates the domain stake-us-vip-telegram.pages.dev was registered through Cloudflare, Inc. on March 23, 2026, and currently resolves to the IP address 188.114.96.3, hosted by Cloudflare in Canada. It appears on one security blocklist (PhishDestroy) and is flagged by 6 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services (WE1), and the page title impersonates a legitimate service, claiming "Stake.US VIP Telegram Weekly Boosts: Data Reveals Trillion GC Payouts." The domain remains active as of this assessment, with no indications of takedown or remediation. To mitigate risks associated with this crypto drainer, users should immediately revoke any wallet permissions granted to stake-us-vip-telegram.pages.dev or related domains. Wallet holders should verify transaction requests directly within their wallet interface before signing, as drainers often spoof approval prompts. Network-level blocking of the domain and its resolving IP (188.114.96.3) is recommended for enterprise environments. Additionally, cryptocurrency users should monitor for unauthorized transactions and report the domain to relevant threat intelligence platforms for broader community protection.