teleport-starknet-stake-hub-mzjxeu[.]pages[.]dev

Analysis of teleport-starknet-stake-hub-mzjxeu.pages.dev confirms its classification as a crypto scam impersonating StarkNet, a known blockchain platform. The domain, registered on February 21, 2026, through Cloudflare, Inc., resolved to IP 188.114.96.3 (AS13335, US) and displayed the page title 'Starknet Stake Hub,' directly referencing StarkNet’s branding. Infrastructure analysis reveals the domain was hosted on Cloudflare Pages (pages.dev) with nameservers hans.ns.cloudflare.com and michelle.ns.cloudflare.com, a common pattern for rapidly deployed scam sites.

No SSL certificate was present, increasing the risk of unencrypted data interception. The domain has been flagged by three security vendors on VirusTotal and appears on three blocklists, including PhishDestroy, MetaMask, and SEAL, indicating broad recognition of its malicious nature. As of July 24, 2026, the domain is offline, though defenders should treat it as a confirmed threat due to its prior activity and infrastructure.

The exact mechanics of the scam—whether a token drainer, fake staking pool, or wallet phishing kit—remain unconfirmed, as the page content was not analyzed. Defenders are advised to block the domain at the DNS level, monitor for related subdomains or IPs, and alert users about StarkNet-themed scams. Given the domain’s recent creation and rapid takedown, similar campaigns may emerge using comparable naming conventions or Cloudflare infrastructure.