# PhishDestroy domain threat record: stakovip.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/stakovip.com/ Machine-readable companion: https://phishdestroy.io/domain/stakovip.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 17:07:23 UTC - Last availability or vendor check: 2026-10-22 17:17:00 UTC - Stored record updated: 2026-10-22 18:30:22 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: aave ## Stored infrastructure - Observed IP address: 172.67.199.119 - Registrar in stored WHOIS data: Cloudflare, Inc. - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-13 06:26:43 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1649b-c08e-701f-aaf6-6f8f2253b1f7/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/stakovip.com - Certificate Transparency search: https://crt.sh/?q=%25.stakovip.com - Web Archive lookup: https://web.archive.org/web/*/https://stakovip.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy listed stakovip.com as a suspicious domain based on an automated detection that marked the urlscan.io capture as malicious. The domain was first seen by PhishDestroy on 2026-10-22 and the page returned an HTTP 200 response with the recorded title "STAKO". No prior public evidence of phishing or fraud was observed on the page at the time of capture. How the scam works The classification relies on patterns typical of phishing sites, which commonly present a deceptive interface to lure visitors into entering credentials, wallet addresses, or other sensitive data. While no specific credential‑stealing form was captured, the urlscan engine identified the page as belonging to a crypto‑related phishing category, indicating the potential for such abuse. Visitors should treat any request for personal or financial information on this site as untrusted. Evidence The urlscan.io capture on 2026-10-22 received a malicious verdict with a 100 score, flagged for phishing and associated with a crypto‑scam brand. VirusTotal scanned the domain on the same date with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked on 2026-10-22 did not flag the site. OTX listed no pulses. External blocklists showed no entries, while PhishDestroy's internal list marked the domain as blocked. Infrastructure The domain was registered on 2026-10-13 through Cloudflare, Inc. and resolves to the Cloudflare IP 172.67.199.119 located in Canada. TLS was provided by Let’s Encrypt, valid from 2026-10-13 to 2027-01-11, using AES‑128‑GCM over QUIC. No DNSSEC records were present. What to do If you visited the site, avoid entering any credentials, wallet addresses, or personal data and change any passwords that may have been entered. Monitor your accounts for unauthorized activity. Defenders should add stakovip.com to web‑filter blocklists, review access logs for connections to the recorded IP, and enforce strict content‑security policies for any downstream services. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a161f2-8179-712a-a9d9-b455859c9eef/ Cloudflare Radar report: https://radar.cloudflare.com/scan/7ed7c061-c556-4e56-a351-55586d01a6ce Stored capture screenshot: https://urlscan.io/screenshots/01a161f2-8179-712a-a9d9-b455859c9eef.png Cloudflare Radar screenshot (2026-10-22T17:09:41Z): https://screenshots.phishdestroy.io/cf/7ed7c061-c556-4e56-a351-55586d01a6ce.png VirusTotal report: https://www.virustotal.com/gui/domain/stakovip.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=stakovip.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 17:11:03 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a1649b-c08e-701f-aaf6-6f8f2253b1f7.png Captured: 2026-10-22 17:17:00 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a161f2-8179-712a-a9d9-b455859c9eef.png Captured: 2026-10-22 17:07:23 UTC Source report: https://urlscan.io/result/01a1649b-c08e-701f-aaf6-6f8f2253b1f7/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7ed7c061-c556-4e56-a351-55586d01a6ce.png Captured: 2026-10-22 17:09:41 UTC Source report: https://radar.cloudflare.com/scan/7ed7c061-c556-4e56-a351-55586d01a6ce SHA-256: bcf943cc03c8326e629d892af5c821fb4f712b88658c61dae121f0f0e11abb3f - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16497-0277-7377-b7ef-9ac5fba8fcc3.png Captured: 2026-10-22 17:09:54 UTC Source report: https://urlscan.io/result/01a16497-0277-7377-b7ef-9ac5fba8fcc3/ SHA-256: dfa8375e32bdc1a5f1e90c92c29485f604b6254ea23c878b48bc169bb4db5fcb ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T17:23:09Z", "uuid": "01a1649b-c08e-701f-aaf6-6f8f2253b1f7", "scanned_at": "2026-10-22T17:15:14Z", "final_url": "https://stakovip.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://stakovip.com/", "from": "http://stakovip.com/", "status": 307 } ], "ip": "172.67.199.119", "domains": [ "www.tradingview-widget.com", "obobs-res.oss-cn-hongkong.aliyuncs.com", "api.web3modal.org", "cca-lite.coinbase.com", "widgetdata.tradingview.com", "widget-sheriff.tradingview-widget.com", "fonts.googleapis.com", "pulse.walletconnect.org", "s3.tradingview.com" ], "ips": [ "108.138.26.38", "172.64.152.241", "142.250.154.95", "104.18.19.237", "172.66.157.155", "185.111.111.157", "47.79.64.240", "172.67.199.119" ], "asns": [ "16509", "13335", "15169", "212238", "45102" ], "countries": [ "US", "DE", "HK" ], "link_domains": [ "www.tradingview.com" ], "doc_hash": "36e825d7eb5a4c21d35d1679656057cb97433e91dc35e0b2e2ff14ec6f3c1f0f", "script_hashes": [ "e4adf42e578d4c9a14612d16e5b1b9434c7becffe14fac7385d167a41195463b", "f237f7321118ef6c0b8cde406b2177911b0aa48ceddf943491ae8b9c87349742", "60045d1f38edf73044aeff851b536c9b8fc5bbc333f86133b8674354d82724c5", "000d1727da144aff734fd18d14a262eed1ce183612d097de71ee68ee2bc00ff7", "546770abb07eb3f28c12704d819d482b2e79e0285726859c7756a198f197c01f", "98a8484fea6da3b9088bc85d258c82c9764304de88c0626eb2438f8cc7922760", "0645f6231dcf5a5a389ff2098fd30f6f74f210fe91bea23671b4f5458056d93d", "227ed8502143c0f3aac4412590082e554735d88eed56fdddf995d3ed88def6e0", "7724ed323ae33da612fbc881d737d5deec4614487fe775bf71035092c2a6ae1c", "b2aa37971b2c6b2d4fddf6307b0ca2dda0fb5b454a7a64f87330afe2a24c0ea0" ], "globals": [ "__INTLIFY_PROD_DEVTOOLS__", "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "__config", "litPropertyMetadata", "reactiveElementVersions", "litHtmlVersions", "litElementVersions", "PubSub", "__VUE__", "_walletConnectCore__count", "_walletConnectCore_", "downloadAppKitLogsBlob", "ClientAnalytics", "href", "origin" ], "cookies": [ "__cf_bm" ], "storage_keys": [ "firstVisitPath", "__7275069", "__6804949", "lang", "main", "chat_session_id", "wagmi.store", "@appkit/active_caip_network_id", "@appkit/active_namespace", "@appkit/connection_status", "@appkit/disconnected_connector_ids", "cbwsdk.store" ], "tls": { "san": [ "*.stakovip.com", "stakovip.com" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "stakovip.com", "protocol": "QUIC", "valid_to": "2027-01-11T07:30:24Z", "valid_from": "2026-10-13T07:30:25Z" }, "domain_age_days": 9, "apex_age_days": 9, "tls_age_days": 9, "tls_valid_days": 89, "requests": 265, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 98, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "cryptoscam" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Crypto Scam" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T17:10:29Z", "uuid": "7ed7c061-c556-4e56-a351-55586d01a6ce", "scanned_at": "2026-10-22T17:09:41Z", "final_url": "https://stakovip.com/", "status": 200, "history": [ { "url": "https://stakovip.com/", "status": 200 } ], "dom_hash": "1b477c7435fe6d6cdfb53919a10098f8ed3b749c5eedc84e19b19a07a362bb84", "doc_hash": "36e825d7eb5a4c21d35d1679656057cb97433e91dc35e0b2e2ff14ec6f3c1f0f", "phishing_v2": [ "phishing" ], "domain_risks": [ "New Domains", "Security Risks" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "stakovip.com", "type": "A", "value": "104.21.60.184" }, { "name": "stakovip.com", "type": "A", "value": "172.67.199.119" }, { "name": "stakovip.com", "type": "AAAA", "value": "2606:4700:3033::6815:3cb8" }, { "name": "stakovip.com", "type": "AAAA", "value": "2606:4700:3036::ac43:c777" } ], "dnssec_valid": false, "ip": "104.21.60.184", "whois": { "registrar": "Cloudflare, Inc.", "created": "2026-10-13T08:26:43Z", "updated": "2026-10-13T08:26:44Z", "expires": "2027-10-13T08:26:43Z", "nameservers": [ "betty.ns.cloudflare.com", "razvan.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T17:09:23Z", "analysis_at": "2026-10-22T06:09:20Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "registrar": "Cloudflare, Inc.", "created": "2026-10-13T08:26:43Z", "expires": "2027-10-13T08:26:43Z", "updated": "2026-10-13T08:26:45Z", "first_seen": "2026-10-13T09:43:21Z", "dns": [ { "ttl": 300, "type": "A", "value": "172.67.199.119" }, { "ttl": 21600, "type": "NS", "value": "betty.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3036::ac43:c777" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3033::6815:3cb8" }, { "ttl": 21600, "type": "NS", "value": "razvan.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "betty.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.60.184" } ], "dns_at": "2026-10-22T06:09:45Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.stakovip.com", "stakovip.com" ], "issuer": "Let's Encrypt / YE1", "serial": "61e2f172ab23ab8a77d878dc0beda61b0b9", "sha256": "deda4ab5acba80811da19c4cbc578e5884197e50464c0a07d66603998f9a0601", "subject": "stakovip.com", "valid_to": "2027-01-11T07:30:24Z", "valid_from": "2026-10-13T07:30:25Z" }, "whois": { "registrar": "Cloudflare, Inc.", "registrar_iana_id": "1910", "registrar_url": "http://www.cloudflare.com", "created": "2026-10-13T08:26:43Z", "updated": "2026-10-13T08:26:44Z", "expires": "2027-10-13T08:26:43Z", "status": [ "addperiod", "clientTransferProhibited", "clienttransferprohibited" ], "nameservers": [ "betty.ns.cloudflare.com", "razvan.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-10-13T08:26:43Z", "last changed": "2026-10-20T08:40:31Z", "registration": "2026-10-13T08:26:43Z", "last update of RDAP database": "2026-10-20T08:40:31Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T17:10:51Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "stakovip.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-22T17:10:03Z", "first": "2026-10-14T05:03:23Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.12, "avg_page_bytes": 2121 }, "social_tags": { "title": "STAKO" }, "trackers": { "requests": 203, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 161, "tls": 28, "wait": 160, "connect": 6, "download": 0 }, "response_ms": 355 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 4336, "co2_grams": 0.0002, "cleaner_than": 90 }, "dns_server": { "ns": [ { "ip": "108.162.195.77", "host": "razvan.ns.cloudflare.com" }, { "ip": "172.64.32.75", "host": "betty.ns.cloudflare.com" } ], "zone": "stakovip.com" }, "location": { "ip": "2606:4700:3036::ac43:c777", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "stakovip.com" }, "dns": { "A": [ "172.67.199.119", "104.21.60.184" ], "NS": [ "razvan.ns.cloudflare.com", "betty.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"betty.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417396653, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3033::6815:3cb8", "2606:4700:3036::ac43:c777" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3036::ac43:c777", "family": 6 }, "redirects": { "chain": [ "https://stakovip.com" ] }, "subdomains": { "count": 2, "subdomains": [ "down.stakovip.com", "www.stakovip.com" ] }, "tech_stack": { "technologies": [ "Vue.js", "PubSubJS", "lit-html", "lit-element", "HSTS", "Cloudflare", "HTTP/3" ] }, "whois": { "registrar": "Cloudflare, Inc.", "created": "2026-10-13T08:26:43Z", "updated": "2026-10-13T08:26:44Z", "expires": "2027-10-13T08:26:43Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "betty.ns.cloudflare.com", "razvan.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } } } } ```