online-stake[.]com

Analysis of the domain online-stake.com indicates it was actively involved in a crypto drainer scam, as classified by threat intelligence sources. The domain was registered on February 21, 2026, through Porkbun LLC, a registrar frequently utilized for both legitimate and fraudulent registrations. Infrastructure analysis reveals the domain was hosted on nameservers ns3.nameserverhub.com and ns4.nameserverhub.com, a configuration commonly observed in low-reputation hosting environments associated with malicious activity. At the time of assessment, the domain was flagged by four out of 95 security vendors on VirusTotal, a detection rate consistent with known crypto-related scams.

Additionally, the domain appears on one security blocklist, specifically PhishDestroy, which specializes in identifying phishing and fraudulent financial sites. The page title, matching the domain name itself, suggests a lack of effort to impersonate a specific brand, though the scam type is explicitly categorized as a crypto scam, aligning with the crypto drainer threat classification. The domain is currently offline, which may indicate takedown action or voluntary abandonment by the threat actors. However, defenders should not assume permanent inactivity, as domains associated with crypto drainers are often reactivated or repurposed.

The registration age of approximately five months at the time of reporting suggests the domain was operational for a limited period, a common tactic to evade prolonged scrutiny. No evidence links this domain to a specific cryptocurrency platform or exchange, and the exact mechanics of the drainer—such as wallet addresses or smart contract interactions—remain unconfirmed due to the lack of active page content. Organizations should treat this domain as high-risk for financial fraud and include it in blocklists for web gateways, email filtering, and endpoint protection systems.