staking[.]origent[.]ai

PhishDestroy flags staking.origent.ai as a live crypto drainer domain designed to mimic a legitimate staking platform for Origent users. The domain is weaponized to trick cryptocurrency holders into connecting their wallets and signing malicious transactions that silently drain balances. At the time of detection, this domain had zero detections on VirusTotal out of 95 engines, meaning mainstream scanners have not yet blacklisted it. The site resolves to 185.209.228.68, uses a Let’s Encrypt SSL certificate, and was registered through NAMECHEAP INC on December 17, 2024. This threat operates as a generic phishing page that pretends to be Origent’s official staking interface. Visitors are prompted to “connect wallet” and may see fake rewards or APYs inflated to urgency, then prompted to sign blockchain transactions that authorize token transfers or approvals to attacker-controlled contracts. The domain is only days old, which explains why detection coverage remains sparse. Because it leverages a recently issued SSL certificate from a trusted provider, naive users may believe the site is legitimate at first glance. If you visited staking.origent.ai, immediately disconnect your wallet, revoke any token approvals you signed on this domain, and move remaining assets to a clean wallet. Scan your device with updated antivirus and consider rotating all wallet passwords and seed phrases used on any machine that accessed the site. Always verify staking links by typing the official Origent domain yourself and enable wallet transaction simulation features where available.