# stakeeth.vip — SUSPICIOUS

> stakeeth.vip is a crypto drainer impersonating ETH staking; 0/95 VirusTotal detections, created May 23 2025. Verify on PhishDestroy before connecting.

## Summary
PhishDestroy identifies stakeeth.vip as an active crypto_drainer domain masquerading as a legitimate ETH staking platform promising 30% APY. No specific brand is impersonated in the page title, but the offering closely mimics legitimate DeFi staking services. The domain hosts a drainer kit that silently drains connected wallets of tokens and NFTs after victims connect via the fake staking interface. Threat intelligence indicates the drainer kit is designed to harvest private keys and seed phrases, redirecting stolen assets to attacker-controlled wallets.

Technical indicators for stakeeth.vip are as follows: VirusTotal shows 0/95 detections as of the last scan, indicating the domain is currently undetected by most antivirus engines. The domain was registered through DYNADOT LLC on May 23, 2025, and resolves to IP address 188.114.96.3. It holds a valid SSL certificate issued by Google Trust Services, suggesting an attempt to appear legitimate. The domain remains unflagged in Google Safe Browsing (GSB) and has not been added to major blocklists, leaving end users exposed.

As of today, stakeeth.vip remains active and under investigation, with no takedown action reported. PhishDestroy continues to monitor the domain and its infrastructure for changes in behavior or network indicators. The risk level is currently classified as active but under investigation, meaning the threat could escalate if the drainer kit evolves or spreads. Users are strongly advised to avoid visiting stakeeth.vip and to verify any staking or DeFi platform URLs through trusted sources or PhishDestroy’s verification service before engaging with wallet connections.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Page title: 30% APY on ETH – Start Staking Today

## Domain Intelligence
- Registered: 2025-05-23 06:45:06
- Registrar: DYNADOT LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3b3dc198-9e3e-4785-b756-effe71e79ae4
- PhishDestroy: https://phishdestroy.io/domain/stakeeth.vip/
- LLM endpoint: https://phishdestroy.io/domain/stakeeth.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/stakeeth.vip/
Last updated: 2026-03-25