m-stargaze[.]pages[.]dev

Analysis indicates that m-stargaze.pages.dev is actively leveraged as a crypto‑drainer phishing site. The domain was registered on March 17, 2026 through Cloudflare and resolves to the Cloudflare‑owned address 172.66.44.80, which is located in Canada. DNS is served by brodie.ns.cloudflare.com and tricia.ns.cloudflare.com, and the site presents a valid Let’s Encrypt certificate (E7) with HSTS and HTTP/3 enabled, suggesting a legitimate‑looking TLS configuration. The page returns HTTP 200 and carries the title "Stargaze 2.0 — Migration to the Hub," but no further content analysis is available. Threat intelligence classifies the activity as a crypto drainer, and 11 of 91 VirusTotal scanners have flagged the domain. It is already blocked by PhishDestroy, appears on one external blocklist, and receives a Gridinsoft trust score of 0/100, reinforcing the high‑risk assessment. Defenders should immediately block the domain at perimeter and endpoint layers, monitor DNS queries for the associated Cloudflare nameservers, and enforce outbound traffic controls to prevent connections to the resolved IP. Continuous re‑scanning and content inspection are advised to detect any evolution of the phishing payloads.