hub-leger-staret[.]pages[.]dev

PhishDestroy identifies hub-leger-staret.pages.dev as an active crypto drainer targeting users with fake staking services. The domain leverages Cloudflare hosting and a Google Trust Services SSL certificate to appear legitimate, but resolves to IP 188.114.96.3 with no VirusTotal detections (8/95).

This domain was flagged through automated analysis for its high-risk threat type: a cryptocurrency drainer designed to siphon funds from unsuspecting victims. The infrastructure relies on Cloudflare's proxy network to obfuscate its origin, while the SSL certificate from Google Trust Services adds a false sense of security. Key red flags include zero detections on VirusTotal despite its malicious nature, which suggests either evasion tactics or delayed detection cycles. No blocklist inclusions were observed at the time of writing, though this may change as threat intelligence evolves.

Users must avoid interacting with hub-leger-staret.pages.dev or any linked payment prompts. If funds are already at risk, immediately revoke wallet permissions and transfer remaining assets to a secure address. Report this domain to PhishDestroy and relevant crypto fraud databases to prevent further exploitation. Always verify staking platforms through official websites and never input seed phrases or private keys on untrusted pages.