stake[.]lidp[.]fi

stake.lidp.fi is currently identified as an active crypto drainer threat as of August 04, 2026. Technical analysis has verified multiple indicators of compromise linked to this domain. It is flagged as malicious by two independent security blocklists, specifically PhishDestroy and ScamSniffer, confirming recognition within the security community. Furthermore, six out of ninety-one security vendors on VirusTotal have marked the domain as suspicious or harmful, reinforcing the high risk associated with this resource.

The domain was registered through Key-Systems GmbH on May 26, 2026, indicating it is relatively recent. The hosting infrastructure utilizes Cloudflare services, evidenced by the presence of Cloudflare Browser Insights, Cloudflare itself, and HTTP/3 support. The site resolves to IP address 188.114.97.3. Nameservers for this domain were not found, which can be indicative of evasive or misconfigured infrastructure, a common trait among domains used for fraudulent operations.

The current page title is 'Just a moment...', which may suggest the use of anti-bot or verification interstitials, but the actual site content has not been directly analyzed. The exact nature of the crypto draining mechanism and user targeting remains unknown due to the absence of further behavioral data.

Defenders should immediately block stake.lidp.fi at network perimeters and update threat intelligence feeds. Incident response teams are advised to monitor for any network or user traffic involving this domain, as ongoing activity suggests continued risk. All available intelligence supports taking precautionary action. Further forensic investigation is recommended to determine if any endpoints may have already interacted with this infrastructure.