# runestake.casino — MALICIOUS > Warning: runestake.casino is an active crypto drainer domain flagged on security blocklists. Exercise caution and avoid transactions on this site. ## Summary PhishDestroy identifies runestake.casino as a medium-risk crypto drainer domain targeting blockchain casino users. It is classified under crypto wallet drainers exploiting online gambling interest. Technical indicators include domain creation on February 21, 2026, resolving to IP 172.67.179.147, and appearing on one security blocklist. VirusTotal flags it by 9 out of 95 security vendors. The page title promotes itself as a popular blockchain-based crypto casino. The domain remains active and flagged, suggesting ongoing malicious activity. Users are advised to avoid interaction and monitors should keep this domain on watchlists to prevent crypto asset loss. ## Threat Details - Verdict: MALICIOUS - Site status: alive (HTTP 530) - Page title: Runestake: Most Popular Online Crypto Casino Based on Blockchain ## Domain Intelligence - Registered: 2026-02-21 07:01:08 - IP: 172.67.179.147 - SSL Issuer: WE1 ## Detection Status - VirusTotal: 9 vendors flagged Vendors: ["ADMINUSLabs", "alphaMountain.ai", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Gridinsoft", "Seclookup", "SOCRadar", "Sophos"] - Google Safe Browsing: clean - Blocklists: 1 hits Lists: ["PhishDestroy"] ## Evidence - Screenshot: https://urlscan.io/screenshots/019baac8-fabd-7108-8c26-1cdb8cc5a1ab.png - PhishDestroy: https://phishdestroy.io/domain/runestake.casino/ - LLM endpoint: https://phishdestroy.io/domain/runestake.casino/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/runestake.casino/ Last updated: 2026-03-19