hub-guild[.]xyz

PhishDestroy identifies hub-guild.xyz as an active crypto drainer with an elevated risk level. This domain is designed to steal cryptocurrency by tricking users into connecting their wallets to fraudulent smart contracts. The site mimics legitimate platforms, such as Guild.xyz, to exploit user trust and facilitate unauthorized fund transfers. Users who interact with this domain risk losing their digital assets to malicious actors who exploit wallet connection vulnerabilities. This domain exhibits multiple red flags consistent with fraudulent activity. SSL certificate issued by Let's Encrypt obscures its malicious nature, as phishers often use legitimate certificates to appear trustworthy. The domain was created on April 04, 2026, a suspiciously recent date suggesting opportunistic registration. It resolves to IP 172.67.144.143, a hosting address associated with previous malicious campaigns. VirusTotal analysis confirms detection by only 4 out of 95 security vendors, indicating poor coverage and high evasion potential. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar with a history of lax oversight on fraudulent domains. Additionally, hub-guild.xyz appears on three prominent blocklists, including those maintained by MetaMask, SEAL, and OISD, reinforcing its malicious classification. These technical indicators collectively confirm a high-risk threat actor with sophisticated evasion techniques. Mitigation for this crypto drainer threat requires immediate action from users and organizations. Never connect your cryptocurrency wallet to any website claiming to be Guild.xyz or similar platforms without verifying the official domain through multiple trusted sources. Use PhishDestroy to confirm domain legitimacy before interacting, as this tool cross-references active blocklists, SSL certificates, and threat intelligence feeds. If you have already connected your wallet, revoke suspicious smart contract permissions immediately using tools like Revoke.cash or similar wallet security features. Report this domain to your antivirus provider, wallet security teams, and relevant cybersecurity platforms to help disrupt ongoing campaigns. Always enable multi-factor authentication on wallets and use hardware wallets for high-value transactions to minimize exposure to drainer scripts.