sanctum-stake[.]co

The domain sanctum-stake.co was registered on July 21, 2026 through Unstoppable Domains Inc. and is hosted on the name servers ns1.unstoppabledomains.com and ns2.unstoppabledomains.com. DNS resolution points to the IPv4 address 186.2.175.103. Threat intelligence flags the domain as a crypto‑drainer operation and assigns a high risk rating. Current monitoring indicates the domain remains active, and it is listed on a single security blocklist.

VirusTotal analysis shows that one out of ninety‑five scanning engines has flagged the domain, suggesting at least minimal detection by anti‑malware services. The domain is also recorded as blocked by the PhishDestroy platform, confirming that at least one external mitigation service has taken action against it. No additional public reputation services, Safe Browsing checks, or Open Threat Exchange entries are reported for this host, leaving the broader detection landscape largely uncharted. The lack of further corroborating data means that the full scope of the campaign—such as payload delivery mechanisms, targeted cryptocurrencies, or victim interaction patterns—remains uncertain.

Defenders should proactively block any network traffic to 186.2.175.103 and add sanctum‑stake.co to local deny lists. Continuous monitoring of the associated name servers and the Unstoppable Domains registrar for new subdomains is advised, as the infrastructure could be leveraged for rapid re‑deployment. Organizations handling cryptocurrency assets should enforce strict validation of transaction destinations and consider integrating reputation feeds that include the observed blocklist entry to reduce exposure to this emerging threat.