# PhishDestroy domain threat record: stakehud.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/stakehud.com/ Machine-readable companion: https://phishdestroy.io/domain/stakehud.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-27 04:19:53 UTC - Last availability or vendor check: 2026-10-28 12:13:07 UTC - Stored record updated: 2026-10-28 12:13:07 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: Cloudflare, Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-13 15:23:44 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a17b9e-b91f-76db-993d-212f4b6e6591/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/stakehud.com - Certificate Transparency search: https://crt.sh/?q=%25.stakehud.com - Web Archive lookup: https://web.archive.org/web/*/https://stakehud.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s automated intake on 2026-10-27 added stakehud.com to the internal blocklist after an admin report and an AI‑derived phishing confidence of 100 %. The recorded page title “DegenHUD · Live session stats and seed checks for Stake” and the excerpt showing a sign‑in form with client‑seed and server‑seed fields led the assessment to flag the site as a credential‑theft impersonation of the Stake gambling platform. The domain was first seen by PhishDestroy on 2026-10-27, fourteen days after its registration on 2026-10-13. How the scam works Impersonation phishing sites copy the branding and terminology of a legitimate service—in this case the online casino Stake—and present a login or seed‑verification interface. Victims who submit their account credentials or game seed values have those secrets captured, enabling attackers to hijack accounts or manipulate provably‑fair game outcomes. Evidence VirusTotal scanned the domain on 2026-10-27 (analysis date 2026-10-17) with 92 engines and reported zero detections and zero suspicious findings. Google Safe Browsing checked on 2026-10-27 and did not flag the URL, while external blocklists MetaMask and SEAL listed stakehud.com as of the same date and OTX recorded three pulses referencing the domain. PhishDestroy’s internal list marked the domain as malicious on 2026-10-27; URLScan captured the site on 2026-10-15 (overall verdict clean) and again on 2026-10-27 where its engine model assigned a malicious score of 96, though the overall verdict remained non‑malicious. Infrastructure The domain was registered with Cloudflare, Inc. on 2026-10-13, giving it a registration age of 14 days at first sighting. DNS resolution returned Cloudflare‑hosted addresses 188.114.96.3 (recorded in GB) and 104.21.19.19 (US), the site presented a TLS certificate from Google Trust Services valid from 2026-10-14 to 2027-01-12, and Cloudflare’s web application firewall was observed while DNSSEC was not enabled. What to do Users should avoid entering any Stake credentials or seed values on stakehud.com; if they have already done so, they should change their Stake password immediately. Defenders should add stakehud.com to internal blocklists and monitor outbound traffic for requests to this exact domain. Review authentication logs for Stake account activity around the first‑seen date and consider additional account‑recovery steps if unauthorized access is detected. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a17b9e-b91f-76db-993d-212f4b6e6591/ Cloudflare Radar report: https://radar.cloudflare.com/scan/a9e25a43-2269-4edf-b8c4-7a998e3e1f08 Stored capture screenshot: https://i.ibb.co/6JqPvFVy/ec535a5b9978.png Cloudflare Radar screenshot (2026-10-27T04:22:35Z): https://screenshots.phishdestroy.io/cf/a9e25a43-2269-4edf-b8c4-7a998e3e1f08.png URLScan screenshot (2026-10-15T05:24:09Z): https://screenshots.phishdestroy.io/us/01a13e04-7623-74cd-b95a-e96199192e21.png URLScan capture report: https://urlscan.io/result/01a13e04-7623-74cd-b95a-e96199192e21/ URLScan screenshot (2026-10-27T04:23:18Z): https://screenshots.phishdestroy.io/us/01a17b99-1960-7430-ac72-5e0a8d60f023.png URLScan capture report: https://urlscan.io/result/01a17b99-1960-7430-ac72-5e0a8d60f023/ URLScan screenshot (2026-10-27T04:32:59Z): https://screenshots.phishdestroy.io/us/01a17ba1-d1e6-7362-90a8-89fa6cfd7256.png URLScan capture report: https://urlscan.io/result/01a17ba1-d1e6-7362-90a8-89fa6cfd7256/ VirusTotal report: https://www.virustotal.com/gui/domain/stakehud.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=stakehud.com Archived copy: https://web.archive.org/web/20261027042031/https://stakehud.com/ Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-27 05:08:31 UTC ## Stored page captures - Primary capture: https://i.ibb.co/6JqPvFVy/ec535a5b9978.png Captured: 2026-10-27 04:30:23 UTC - URLScan capture 1: https://urlscan.io/screenshots/01a17b9e-b91f-76db-993d-212f4b6e6591.png Captured: 2026-10-27 04:30:23 UTC Source report: https://urlscan.io/result/01a17b9e-b91f-76db-993d-212f4b6e6591/ - URLScan capture 2: https://screenshots.phishdestroy.io/01a13e04-7623-74cd-b95a-e96199192e21.png Captured: 2026-10-27 04:19:53 UTC Source report: https://urlscan.io/result/01a17b9e-b91f-76db-993d-212f4b6e6591/ - URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17b99-1960-7430-ac72-5e0a8d60f023.png Captured: 2026-10-27 04:23:18 UTC Source report: https://urlscan.io/result/01a17b99-1960-7430-ac72-5e0a8d60f023/ SHA-256: c77371c206ca81e537372c844e13fe8f4f52a6bd2df72e3cc712b5555d04083b - URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17ba1-d1e6-7362-90a8-89fa6cfd7256.png Captured: 2026-10-27 04:32:59 UTC Source report: https://urlscan.io/result/01a17ba1-d1e6-7362-90a8-89fa6cfd7256/ SHA-256: c073dea934615ee9dae451fab6cd01002dc472ab69e50094eb7d08ad907ddae8 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a9e25a43-2269-4edf-b8c4-7a998e3e1f08.png Captured: 2026-10-27 04:22:35 UTC Source report: https://radar.cloudflare.com/scan/a9e25a43-2269-4edf-b8c4-7a998e3e1f08 SHA-256: 187919ea312213d76cd7cb6eca8624a59b68472a8d403af58ac543962e37e37b - URLScan · 2026-10-15: https://screenshots.phishdestroy.io/us/01a13e04-7623-74cd-b95a-e96199192e21.png Captured: 2026-10-15 05:24:09 UTC Source report: https://urlscan.io/result/01a13e04-7623-74cd-b95a-e96199192e21/ SHA-256: 7ddecfde2021d07cde2bf8ae5dae32f19590c2c254cabd1480bdec11a2fdab0d ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-27T05:07:34Z", "uuid": "01a17b9e-b91f-76db-993d-212f4b6e6591", "scanned_at": "2026-10-27T04:29:40Z", "final_url": "https://stakehud.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://stakehud.com/", "from": "http://stakehud.com/", "status": 307 } ], "ip": "172.67.184.119", "domains": [ "fonts.gstatic.com", "api.stakehud.com", "static.cloudflareinsights.com", "fonts.googleapis.com" ], "ips": [ "192.178.155.94", "104.16.80.73", "172.253.115.95", "172.67.184.119" ], "asns": [ "15169", "13335" ], "countries": [ "US" ], "doc_hash": "cf4aecd068105ddd61a5de96c556e55db5f9d4643a79e2e42dd08b7a115a32c8", "script_hashes": [ "5389097715adae9c206a1e50df6add98a5cf868fc8fc900ac36345577f9eafab", "80df406f45c13b6f3ecb63ded3503e4cd4b909da5c9e6a7481508180687e523c" ], "globals": [ "__cfBeacon" ], "storage_keys": [ "shud_ink" ], "tls": { "san": [ "stakehud.com", "www.stakehud.com", "*.www.stakehud.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "stakehud.com", "protocol": "QUIC", "valid_to": "2027-01-12T17:21:11Z", "valid_from": "2026-10-14T16:21:14Z" }, "domain_age_days": 12, "apex_age_days": 12, "tls_age_days": 12, "tls_valid_days": 90, "requests": 16, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 96, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html", "content-security-policy": "default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://cdn.discordapp.", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()" } }, "cf": { "v": 1, "fetched_at": "2026-10-27T04:24:17Z", "uuid": "a9e25a43-2269-4edf-b8c4-7a998e3e1f08", "scanned_at": "2026-10-27T04:22:35Z", "final_url": "https://stakehud.com/", "status": 200, "history": [ { "url": "https://stakehud.com/", "status": 200 } ], "dom_hash": "0bfd5f0b6e84879bcda6c16dae3dd6aec67ea7dd690dd3da8281fb2475a08bdb", "doc_hash": "cf4aecd068105ddd61a5de96c556e55db5f9d4643a79e2e42dd08b7a115a32c8", "domain_risks": [ "New Domains", "Security Risks" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "api.stakehud.com", "type": "A", "value": "172.67.184.119" }, { "name": "api.stakehud.com", "type": "A", "value": "104.21.19.19" }, { "name": "api.stakehud.com", "type": "AAAA", "value": "2606:4700:3032::6815:1313" }, { "name": "api.stakehud.com", "type": "AAAA", "value": "2606:4700:3031::ac43:b877" }, { "name": "stakehud.com", "type": "A", "value": "104.21.19.19" }, { "name": "stakehud.com", "type": "A", "value": "172.67.184.119" }, { "name": "stakehud.com", "type": "AAAA", "value": "2606:4700:3032::6815:1313" }, { "name": "stakehud.com", "type": "AAAA", "value": "2606:4700:3031::ac43:b877" } ], "dnssec_valid": false, "ip": "104.21.19.19", "whois": { "registrar": "Cloudflare, Inc.", "created": "2026-10-13T17:23:44Z", "updated": "2026-10-13T17:23:45Z", "expires": "2027-10-13T17:23:44Z", "nameservers": [ "kenia.ns.cloudflare.com", "matias.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-27T05:01:31Z", "analysis_at": "2026-10-17T10:53:21Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "registrar": "Cloudflare, Inc.", "created": "2026-10-13T17:23:44Z", "expires": "2027-10-13T17:23:44Z", "updated": "2026-10-13T17:23:46Z", "first_seen": "2026-10-14T17:46:20Z", "dns": [ { "ttl": 300, "type": "AAAA", "value": "2606:4700:3032::6815:1313" }, { "ttl": 21600, "type": "NS", "value": "kenia.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "matias.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.184.119" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "kenia.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::ac43:b877" }, { "ttl": 300, "type": "A", "value": "104.21.19.19" } ], "dns_at": "2026-10-17T11:04:43Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "stakehud.com", "www.stakehud.com", "*.www.stakehud.com" ], "issuer": "Google Trust Services / WE1", "serial": "cd18e3450710eeac13d584c0b625094f", "sha256": "e635e1b4e58865b1c2a1c86e6a93cf7c77186bdff24f32168e89956ab5bf93e5", "subject": "stakehud.com", "valid_to": "2027-01-12T17:21:11Z", "valid_from": "2026-10-14T16:21:14Z" }, "whois": { "registrar": "Cloudflare, Inc.", "registrar_iana_id": "1910", "registrar_url": "http://www.cloudflare.com", "created": "2026-10-13T17:23:44Z", "updated": "2026-10-13T17:23:45Z", "expires": "2027-10-13T17:23:44Z", "status": [ "addperiod", "clientTransferProhibited", "clienttransferprohibited" ], "nameservers": [ "kenia.ns.cloudflare.com", "matias.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited", "add period" ], "events": { "expiration": "2027-10-13T17:23:44Z", "last changed": "2026-10-13T17:23:46Z", "registration": "2026-10-13T17:23:44Z", "last update of RDAP database": "2026-10-13T17:23:46Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-27T04:24:34Z", "mail_config": { "mx": [ "route2.mx.cloudflare.net", "route1.mx.cloudflare.net", "route3.mx.cloudflare.net" ], "spf": "v=spf1 include:_spf.mx.cloudflare.net ~all", "dane": true, "dmarc": true, "spf_lookups": 1 }, "caa_records": { "domain": "stakehud.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-27T04:20:31Z", "first": "2026-10-27T04:20:31Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 14039 }, "social_tags": { "ogUrl": "https://degenhud.com/", "title": "DegenHUD · Live session stats and seed checks for Stake", "ogType": "website", "ogImage": "https://degenhud.com/img/og.png", "ogTitle": "DegenHUD · Live session stats and seed checks for Stake", "ogSiteName": "DegenHUD", "themeColor": "#0e1115", "description": "DegenHUD is a browser extension for Stake: live session stats, seed verification, VIP progress and a paytable calculator. Independent tool. Not affiliated with or endorsed by Stake.", "twitterCard": "summary_large_image", "canonicalUrl": "https://degenhud.com/", "ogDescription": "Every round on the record. Every seed checked. A browser extension for Stake." }, "trackers": { "requests": 13, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 5 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 38, "tls": 86, "wait": 104, "connect": 268, "download": 1 }, "response_ms": 497 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 40237, "co2_grams": 0.0015, "cleaner_than": 42 }, "dns_server": { "ns": [ { "ip": "162.159.44.73", "host": "matias.ns.cloudflare.com" }, { "ip": "162.159.38.93", "host": "kenia.ns.cloudflare.com" } ], "zone": "stakehud.com" }, "location": { "ip": "2a06:98c1:3121::3", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "stakehud.com" }, "dns": { "A": [ "188.114.97.3", "188.114.96.3" ], "MX": [ "{\"exchange\": \"route1.mx.cloudflare.net\", \"priority\": 97}", "{\"exchange\": \"route3.mx.cloudflare.net\", \"priority\": 20}", "{\"exchange\": \"route2.mx.cloudflare.net\", \"priority\": 53}" ], "NS": [ "matias.ns.cloudflare.com", "kenia.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"kenia.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417936730, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "v=spf1 include:_spf.mx.cloudflare.net ~all" ], "AAAA": [ "2a06:98c1:3121::3", "2a06:98c1:3120::3" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": false, "permissionsPolicy": "camera=(), microphone=(), geolocation=()", "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-in", "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3120::3", "family": 6 }, "redirects": { "chain": [ "https://stakehud.com" ] }, "tech_stack": { "technologies": [ "Google Font API", "Cloudflare", "PWA", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 10 }, "whois": { "registrar": "Cloudflare, Inc.", "created": "2026-10-13T17:23:44Z", "updated": "2026-10-13T17:23:45Z", "expires": "2027-10-13T17:23:44Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "kenia.ns.cloudflare.com", "matias.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html", "content-security-policy": "default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://cdn.discordapp.com https://*.googleusercontent.com https://api.stakehud.com https://api.degenhud.com; connect-src '", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=()" } } } } ```