# PhishDestroy domain threat record: stoktoken.live

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/stoktoken.live/
Machine-readable companion: https://phishdestroy.io/domain/stoktoken.live/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 19:42:41 UTC
- Last availability or vendor check: 2026-10-23 19:42:41 UTC
- Stored record updated: 2026-10-23 20:00:07 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: flagged

## Stored infrastructure

- Observed IP address: 216.198.79.1
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 308
- Registration date in stored WHOIS data: 2026-08-10 22:28:03 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16a48-b706-7269-8764-558a35bd67fa/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/stoktoken.live
- Certificate Transparency search: https://crt.sh/?q=%25.stoktoken.live
- Web Archive lookup: https://web.archive.org/web/*/https://stoktoken.live/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed stoktoken.live as a suspicious domain after Google Safe Browsing flagged it for social‑engineering. The recorded page title is “Stonkbrokers — Claim Your Allocation”. The domain was first seen by PhishDestroy on 2026-10-23.

How the scam works
The listing does not confirm a particular technique; it indicates the site could be used to lure visitors into revealing credentials, authorizing wallet actions, or otherwise disclosing personal information through social‑engineering tactics commonly seen on fake‑offer pages.

Evidence
Google Safe Browsing checked on 2026-10-23 flagged the domain for social‑engineering. VirusTotal analysis on 2026-10-17 (retrieved 2026-10-23) reported 0 detections from 92 engines. urlscan.io captured the page on 2026-10-23; its machine‑learning engine gave a malicious score of 98 while the overall verdict was non‑malicious. OTX showed no pulses as of 2026-10-23. External blocklists returned no hits on 2026-10-23, and PhishDestroy’s internal list marked the domain as blocked on the same date. The HTTP response recorded on 2026-10-23 was a 308 redirect to the www subdomain.

Infrastructure
The domain was registered on 2026-08-11 through Dynadot Inc, giving it an age of 73 days at detection. The recorded IP address is 216.198.79.1, listed as belonging to Network Billing Systems in the United States. TLS was provided by a Let’s Encrypt / YR1 certificate valid from 2026-10-11 to 2027-01-09. The server header reported Vercel, and DNS is served by Cloudflare nameservers.

What to do
Visitors should avoid entering login credentials, seed phrases, or approving any wallet connections on this site. If credentials were entered, change the associated passwords immediately. Organizations can add stoktoken.live to web‑filter or firewall block lists and monitor DNS queries for the domain. Continue to watch threat‑intel sources for any updates.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a16a48-b706-7269-8764-558a35bd67fa/
Cloudflare Radar report: https://radar.cloudflare.com/scan/8c22ed36-0816-4879-b26a-ffe2ff408fee
Stored capture screenshot: https://i.ibb.co/BHMdNHYM/8e338cfb5a52.png
Cloudflare Radar screenshot (2026-10-23T19:43:12Z): https://screenshots.phishdestroy.io/cf/8c22ed36-0816-4879-b26a-ffe2ff408fee.png
VirusTotal report: https://www.virustotal.com/gui/domain/stoktoken.live
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=stoktoken.live
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 19:44:35 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/BHMdNHYM/8e338cfb5a52.png
  Captured: 2026-10-23 19:42:41 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a16a48-b706-7269-8764-558a35bd67fa.png
  Captured: 2026-10-23 19:42:41 UTC
  Source report: https://urlscan.io/result/01a16a48-b706-7269-8764-558a35bd67fa/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8c22ed36-0816-4879-b26a-ffe2ff408fee.png
  Captured: 2026-10-23 19:43:12 UTC
  Source report: https://radar.cloudflare.com/scan/8c22ed36-0816-4879-b26a-ffe2ff408fee
  SHA-256: ae5c0ce518e3ccc44394351dc905378a86122e9ab8ad5f72375b540706720dae

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T19:43:35Z",
        "uuid": "01a16a48-b706-7269-8764-558a35bd67fa",
        "scanned_at": "2026-10-23T19:41:59Z",
        "final_url": "https://www.stoktoken.live/",
        "status": 200,
        "redirected": "parent-domain",
        "redirects": [
            {
                "to": "https://stoktoken.live/",
                "from": "http://stoktoken.live/",
                "status": 307
            },
            {
                "to": "https://www.stoktoken.live/",
                "from": "https://stoktoken.live/",
                "status": 308
            }
        ],
        "ip": "64.29.17.1",
        "domains": [
            "api.web3modal.org",
            "fonts.gstatic.com",
            "quiet-pine-8993.hellohyper110.workers.dev",
            "fonts.googleapis.com",
            "api.ipify.org",
            "cdnjs.cloudflare.com",
            "pulse.walletconnect.org",
            "secure.walletconnect.org",
            "cdn.jsdelivr.net",
            "pbs.twimg.com",
            "stoktoken.live"
        ],
        "ips": [
            "104.18.19.237",
            "172.66.157.155",
            "2606:4700::6811:d005",
            "104.26.12.205",
            "104.17.25.14",
            "142.251.127.94",
            "172.64.150.129",
            "2a00:1450:4001:c25::5f",
            "172.67.195.152",
            "64.29.17.1",
            "216.198.79.1"
        ],
        "asns": [
            "13335",
            "15169",
            "16509"
        ],
        "countries": [
            "US",
            "DE"
        ],
        "doc_hash": "c1c4221bab01ee411174d843e9755cc2c58dae5fb7488d7f31ddcae32ad21840",
        "globals": [
            "do‌",
            "typeof‌‌‌‌‌‌‌‌‌‌‌‌",
            "instanceof‌‌‌‌‌‌‌‌",
            "new‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "__globalObject",
            "__TextDecoder",
            "__Uint8Array",
            "__String",
            "__Array",
            "utf8ArrayToStr",
            "NaN‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "try‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "var‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "function‌‌‌‌‌‌‌‌‌‌",
            "finally‌‌‌‌‌‌‌‌‌‌‌",
            "throw‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "of‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "switch‌‌‌‌‌‌‌‌‌‌‌‌",
            "private‌‌‌‌‌‌‌‌‌‌‌",
            "do‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "default‌‌‌‌‌‌‌‌‌‌‌",
            "let‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "for‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "finally‌‌‌‌‌‌‌‌‌‌‌‌",
            "if‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "this‌‌‌‌‌‌‌‌‌‌‌‌‌‌‌",
            "e46jvfbmmj",
            "d5a584a3",
            "f3d69dbc0970fddfc1",
            "c0399800dde9ce31",
            "ff9de051627148",
            "da0dac7027b8fe",
            "f8ce49d68e3f",
            "_myrrsqrpa",
            "Buffer",
            "global",
            "process",
            "litPropertyMetadata",
            "reactiveElementVersions",
            "litHtmlVersions"
        ],
        "cookies": [
            "gacfxdn1x7"
        ],
        "storage_keys": [
            "@appkit/active_caip_network_id"
        ],
        "tls": {
            "san": [
                "www.stoktoken.live"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR2",
            "subject": "www.stoktoken.live",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-09T13:17:35Z",
            "valid_from": "2026-10-11T13:17:36Z"
        },
        "domain_age_days": 73,
        "apex_age_days": 73,
        "tls_age_days": 12,
        "tls_valid_days": 89,
        "requests": 57,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Vercel",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T19:43:37Z",
        "uuid": "8c22ed36-0816-4879-b26a-ffe2ff408fee",
        "scanned_at": "2026-10-23T19:43:12Z",
        "final_url": "https://www.stoktoken.live/",
        "status": 200,
        "redirected": "subdomain",
        "history": [
            {
                "url": "https://stoktoken.live/",
                "status": 308
            },
            {
                "url": "https://www.stoktoken.live/",
                "status": 200
            }
        ],
        "dom_hash": "2244edc6b6a0a0d9cb20eba70a3cc9f04206edfbb4522e8b402a64a74123e2ce",
        "doc_hash": "c1c4221bab01ee411174d843e9755cc2c58dae5fb7488d7f31ddcae32ad21840",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "stoktoken.live",
                "type": "A",
                "value": "216.198.79.1"
            },
            {
                "name": "www.stoktoken.live",
                "type": "CNAME",
                "value": "e8dec67eefe862ea.vercel-dns-017.com"
            },
            {
                "name": "www.stoktoken.live",
                "type": "CNAME",
                "value": "e8dec67eefe862ea.vercel-dns-017.com"
            }
        ],
        "dnssec_valid": false,
        "ip": "64.29.17.65"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T19:43:07Z",
        "analysis_at": "2026-10-16T23:49:37Z",
        "stats": {
            "timeout": 0,
            "harmless": 55,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 37
        },
        "reputation": 0,
        "first_seen": "2026-08-11T02:09:03Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "216.198.79.1"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "mckenzie.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "seth.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "mckenzie.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-17T00:02:08Z",
        "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb",
        "cert": {
            "san": [
                "stoktoken.live"
            ],
            "issuer": "Let's Encrypt / YR1",
            "serial": "69bc1880d4a253c1efc9c3ae652d7a7dd05",
            "sha256": "80d2e281b4f8d9aabcaff3bf4e854a190da7e6247754c60833dfcf0e2a19008d",
            "subject": "stoktoken.live",
            "valid_to": "2027-01-09T15:07:04Z",
            "valid_from": "2026-10-11T15:07:05Z"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-08-11T00:28:03Z",
                "last changed": "2026-08-11T00:39:41Z",
                "registration": "2026-08-11T00:28:03Z",
                "registrar expiration": "2027-08-11T00:28:03Z",
                "last update of RDAP database": "2026-10-16T07:31:15Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T19:43:58Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "stoktoken.live"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "social_tags": {
            "title": "Stonkbrokers — Claim Your Allocation"
        },
        "trackers": {
            "requests": 9,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 4
                },
                {
                    "name": "X Corp.",
                    "company": "X Corp.",
                    "country": "US",
                    "category": "Social Media",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://quiet-pine-8993.hellohyper110.workers.dev/"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 308,
            "timings": {
                "dns": 23,
                "tls": 18,
                "wait": 19,
                "connect": 6,
                "download": 0
            },
            "response_ms": 66
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 15216,
            "co2_grams": 0.0006,
            "cleaner_than": 63
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.59.142",
                    "host": "seth.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.253",
                    "host": "mckenzie.ns.cloudflare.com"
                }
            ],
            "zone": "stoktoken.live"
        },
        "location": {
            "ip": "216.198.79.1",
            "asn": "16509",
            "org": "Network Billing Systems",
            "city": "Atlanta",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR1",
            "subject": "stoktoken.live"
        },
        "dns": {
            "A": [
                "216.198.79.1"
            ],
            "NS": [
                "mckenzie.ns.cloudflare.com",
                "seth.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"mckenzie.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416999155, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=63072000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "216.198.79.1",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://stoktoken.live",
                "https://www.stoktoken.live/"
            ],
            "count": 1
        },
        "subdomains": {
            "count": 1,
            "subdomains": [
                "www.stoktoken.live"
            ]
        },
        "headers": {
            "headers": {
                "server": "Vercel",
                "content-type": "text/html; charset=utf-8",
                "strict-transport-security": "max-age=63072000"
            }
        }
    }
}
```