saakuru-stake[.]pages[.]dev

PhishDestroy identifies saakuru-stake.pages.dev as a live crypto drainer, currently under investigation for actively harvesting cryptocurrency credentials and assets. The domain masquerades as Saakuru Stake, a staking interface, suggesting a phishing lure targeting users of the Saakuru ecosystem. Operational indicators point to a drainer kit designed to intercept wallet connections and prompt fake authentication flows, likely leveraging social engineering to deceive users into granting malicious wallet permissions. No public brand has been directly implicated in this campaign, indicating a likely impersonation attempt rather than a compromise of official infrastructure. saakuru-stake.pages.dev resolves to IP 172.66.44.99 via Cloudflare, Inc. and is protected by an SSL certificate issued by Google Trust Services. The domain shows zero detections on VirusTotal out of 95 engines as of the latest scan, indicating it remains under the radar of mainstream security platforms. Current WHOIS data suggests recent registration, but full creation and expiry dates are obscured by Cloudflare’s privacy protection. Despite low detection, the drainer remains active and is actively serving malicious JavaScript payloads to visitors. As of this assessment, saakuru-stake.pages.dev is classified as an active crypto drainer with undetected status on major threat feeds. This domain is currently not listed on Google Safe Browsing, but its low detection rate presents a significant risk to cryptocurrency users. Immediate recommendation is to block the domain at the network and browser level and avoid interaction. The risk level remains under investigation but is considered HIGH due to active exploitation and lack of detection. Users should verify any staking-related URLs via official Saakuru channels and use hardware wallets or transaction simulation tools before approving wallet connections.