grasss-6ud[.]pages[.]dev

PhishDestroy identifies grasss-6ud.pages.dev as an active generic phishing domain posing a high risk to users. The site, with a page titled "Grass: Join to Earn a Stake in AI," attempts to lure victims under a deceptive AI investment or staking scheme. There is no specific drainer kit noted, but the platform's use of the Google Trust Services SSL certificate and Cloudflare registrar suggests it tries to appear legitimate to unsuspecting users.

This domain has a VirusTotal detection rate of 1 out of 95 security vendors, indicating early but limited identification. It resolves to IP address 188.114.97.3 and is registered through Cloudflare, Inc. The domain is currently blacklisted by MetaMask and SEAL, and it appears on two security blocklists overall. Although the Google Safe Browsing status is not explicitly stated, the presence on multiple blocklists confirms its malicious intent and risk.

At present, grasss-6ud.pages.dev remains active and continues to pose a threat to users who may fall victim to its phishing tactics by providing sensitive data or credentials. It is strongly advised that users avoid interacting with the domain, especially since it is blocked by major security tools like MetaMask. Security teams should ensure their blocklists include this domain and educate users about the danger of engaging with unknown AI investment or staking platforms. Immediate takedown requests and monitoring are recommended to mitigate ongoing risks.