# PhishDestroy domain threat record: manltestaked.ink

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/manltestaked.ink/
Machine-readable companion: https://phishdestroy.io/domain/manltestaked.ink/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-20 22:42:44 UTC
- Last availability or vendor check: 2026-10-22 10:59:51 UTC
- Stored record updated: 2026-10-22 16:07:29 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: aave

## Stored infrastructure

- Observed IP address: 104.21.53.117
- Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Registrar country in stored WHOIS data: CN
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-15 15:37:13 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a15b7a-07a7-75f2-97c0-ff9e54568576/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/manltestaked.ink
- Certificate Transparency search: https://crt.sh/?q=%25.manltestaked.ink
- Web Archive lookup: https://web.archive.org/web/*/https://manltestaked.ink/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy has added manltestaked.ink to its internal blocklist as a suspicious domain. The recorded page title reads “Mantlestaked – Stake ETH and Use mETH in DeFi”. The domain was first seen by PhishDestroy on 2026-10-21.

How the scam works
Because the domain is only flagged as suspicious, no concrete scam mechanism can be confirmed. In general, sites that advertise crypto staking may try to persuade users to deposit funds, grant wallet permissions, or disclose personal data, but such activity has not been observed on this page.

Evidence
VirusTotal scanned the domain on 2026-10-21 and reported 0 detections from 92 engines. Google Safe Browsing checked the site on 2026-10-21 and did not flag it. External blocklists MetaMask and SEAL listed the domain (2 listings) on 2026-10-21, and PhishDestroy’s own internal list also includes it as of that date. OTX recorded four pulses mentioning the domain on 2026-10-21.

Infrastructure
The recorded IP address for the domain was 104.21.53.117 when checked on 2026-10-21. No registrar, certificate or additional hosting details are present in the available data.

What to do
Do not enter private keys, seed phrases, or grant wallet approvals on this site. If any credentials were submitted, change them immediately and review associated accounts. Defenders should block the exact domain name and monitor network logs for traffic to 104.21.53.117.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a15b7a-07a7-75f2-97c0-ff9e54568576/
VirusTotal report: https://www.virustotal.com/gui/domain/manltestaked.ink
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=manltestaked.ink
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-20 23:14:02 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/x87zKmSH/c98c81ddb8b2.png
  Captured: 2026-10-20 22:42:44 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a15b7a-07a7-75f2-97c0-ff9e54568576.png
  Captured: 2026-10-20 22:42:44 UTC
  Source report: https://urlscan.io/result/01a15b7a-07a7-75f2-97c0-ff9e54568576/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e63755ae-540e-43fd-bf15-b76d7a774e92.png
  Captured: 2026-10-20 23:13:47 UTC
  Source report: https://radar.cloudflare.com/scan/e63755ae-540e-43fd-bf15-b76d7a774e92
  SHA-256: e6eb4357221cc818b6205bf5f36450cea5b762266f22903184025183fca50e20
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15b7b-9da6-75df-b43b-2094b468107f.png
  Captured: 2026-10-20 22:43:15 UTC
  Source report: https://urlscan.io/result/01a15b7b-9da6-75df-b43b-2094b468107f/
  SHA-256: f3a67e67147c2b50982ffbeb2aad1609bfae7d687dd077de8d4fc41ec910d7c5

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T23:43:30Z",
        "uuid": "01a15b7a-07a7-75f2-97c0-ff9e54568576",
        "scanned_at": "2026-10-20T22:41:35Z",
        "final_url": "https://manltestaked.ink/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://manltestaked.ink/",
                "from": "http://manltestaked.ink/",
                "status": 307
            }
        ],
        "ip": "104.21.53.117",
        "domains": [
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "104.16.80.73",
            "104.21.53.117"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "1a183a13b8b22b9cf93d05c35a739c5b1710f7458b046131df9366e4a72085bc",
        "globals": [
            "__cfBeacon"
        ],
        "tls": {
            "san": [
                "*.manltestaked.ink",
                "manltestaked.ink"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "manltestaked.ink",
            "protocol": "QUIC",
            "valid_to": "2027-01-13T16:46:47Z",
            "valid_from": "2026-10-15T16:46:48Z"
        },
        "domain_age_days": 4,
        "apex_age_days": 4,
        "tls_age_days": 5,
        "tls_valid_days": 89,
        "requests": 7,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 96,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8",
            "x-content-type-options": "nosniff",
            "referrer-policy": "strict-origin-when-cross-origin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-21T00:21:17Z",
        "uuid": "e63755ae-540e-43fd-bf15-b76d7a774e92",
        "scanned_at": "2026-10-20T23:13:47Z",
        "final_url": "https://manltestaked.ink/",
        "status": 200,
        "history": [
            {
                "url": "https://manltestaked.ink/",
                "status": 200
            }
        ],
        "dom_hash": "0a5a8354395291aa8c337b3e87ceca8ac08c97e6d319bf3ea0bd3f766654ec4d",
        "doc_hash": "1a183a13b8b22b9cf93d05c35a739c5b1710f7458b046131df9366e4a72085bc",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "manltestaked.ink",
                "type": "A",
                "value": "172.67.212.160"
            },
            {
                "name": "manltestaked.ink",
                "type": "A",
                "value": "104.21.53.117"
            },
            {
                "name": "manltestaked.ink",
                "type": "AAAA",
                "value": "2606:4700:3032::6815:3575"
            },
            {
                "name": "manltestaked.ink",
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:d4a0"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.212.160",
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-15T17:37:13Z",
            "updated": "2026-10-15T17:37:30Z",
            "expires": "2027-10-15T17:37:13Z",
            "nameservers": [
                "lana.ns.cloudflare.com",
                "josh.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T00:08:26Z",
        "analysis_at": "2026-10-20T23:05:30Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
        "created": "2026-10-15T17:37:13Z",
        "expires": "2027-10-15T17:37:13Z",
        "updated": "2026-10-15T17:37:30Z",
        "first_seen": "2026-10-16T04:31:05Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::6815:3575"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "lana.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "josh.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.212.160"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:d4a0"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "josh.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.53.117"
            }
        ],
        "dns_at": "2026-10-20T23:10:46Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.manltestaked.ink",
                "manltestaked.ink"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "6ba313b314513534c1c31909c22aa85ebec",
            "sha256": "29be6f8b1270a2a67a3455c97aff66910811aedec4eaeacb0183550557ed6dc9",
            "subject": "manltestaked.ink",
            "valid_to": "2027-01-13T16:46:47Z",
            "valid_from": "2026-10-15T16:46:48Z"
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "registrar_iana_id": "3765",
            "registrar_url": "https://nicenic.com",
            "created": "2026-10-15T16:00:00Z",
            "updated": "2026-10-15T16:00:00Z",
            "expires": "2027-10-15T16:00:00Z",
            "status": [
                "addPeriod",
                "clientDeleteProhibited",
                "clientTransferProhibited",
                "serverTransferProhibited"
            ],
            "nameservers": [
                "josh.ns.cloudflare.com",
                "lana.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-15T16:00:00Z",
                "registration": "2026-10-15T16:00:00Z",
                "registrar expiration": "2027-10-15T16:00:00Z",
                "last update of RDAP database": "2026-10-15T16:00:00Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T00:09:02Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "manltestaked.ink"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-20T22:45:28Z",
            "first": "2026-10-16T02:32:54Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.21,
            "avg_page_bytes": 6438
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://manltestaked.ink/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5
        },
        "social_tags": {
            "ogUrl": "https://manltestaked.ink/",
            "title": "Mantlestaked - Stake ETH and Use mETH in DeFi",
            "ogType": "website",
            "robots": "follow, index",
            "ogImage": "https://manltestaked.ink/media/photos/mantlestaked-02.png",
            "ogTitle": "Mantlestaked - Stake ETH and Use mETH in DeFi",
            "ogSiteName": "Mantlestaked",
            "themeColor": "#5a2510",
            "description": "Mantlestaked is an Ethereum liquid staking protocol that issues mETH, a reward-accruing ERC-20 receipt token usable in Ethereum and Mantle DeFi.",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://manltestaked.ink/",
            "ogDescription": "Mantlestaked is an Ethereum liquid staking protocol that issues mETH, a reward-accruing ERC-20 receipt token usable in Ethereum and Mantle DeFi."
        },
        "trackers": {
            "requests": 2
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1,
                "tls": 33,
                "wait": 68,
                "connect": 11,
                "download": 9
            },
            "response_ms": 122
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 36439,
            "co2_grams": 0.0013,
            "cleaner_than": 44
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.192.182",
                    "host": "lana.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.193.126",
                    "host": "josh.ns.cloudflare.com"
                }
            ],
            "zone": "manltestaked.ink"
        },
        "location": {
            "ip": "2606:4700:3032::6815:3575",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "manltestaked.ink"
        },
        "dns": {
            "A": [
                "104.21.53.117",
                "172.67.212.160"
            ],
            "NS": [
                "lana.ns.cloudflare.com",
                "josh.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"josh.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417621584, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3031::ac43:d4a0",
                "2606:4700:3032::6815:3575"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": "strict-origin-when-cross-origin",
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3031::ac43:d4a0",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://manltestaked.ink"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Cloudflare",
                "Open Graph",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "internal_count": 9
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-15T17:37:13Z",
            "updated": "2026-10-20T17:37:17Z",
            "expires": "2027-10-15T17:37:13Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp",
                "serverTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "josh.ns.cloudflare.com",
                "lana.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=UTF-8",
                "x-content-type-options": "nosniff",
                "referrer-policy": "strict-origin-when-cross-origin"
            }
        }
    }
}
```