unilabs-hubs[.]pages[.]dev

The domain unilabs-hubs.pages.dev has been identified as a generic phishing threat targeting users by impersonating a financial brand. The page title suggests it is associated with a fictitious DeFi asset manager, indicating potential intent to deceive users for financial gain. There is no specific drainer kit identified at this time, but the content appears aimed at eliciting sensitive information from users.

Technical indicators reveal that the domain has a VirusTotal detection score of 1/95, indicating minimal recognition among security vendors. It was registered through Cloudflare, Inc. on March 27, 2026, and resolves to the IP address 188.114.97.3, which is hosted in Canada. The domain appears on one security blocklist and is blocked by PhishDestroy, highlighting its malicious nature. The Google Trust Services SSL certificate adds a layer of apparent legitimacy, but this does not mitigate the phishing risk.

Currently, the domain is still active and continues to pose a high risk to users. Given the ongoing threat, it is advised that users avoid interacting with this domain and report any encounters. Security professionals should monitor for any changes in its status or additional indicators of compromise. Continuous vigilance is required as the domain remains a potential vector for phishing attacks.