stake1[.]cc

Analysis indicates that stake1.cc was registered on 21 February 2026 through Dynadot LLC and immediately pointed to the Cloudflare‑owned address 188.114.96.3 (AS13335, United States). The domain resolves to a single IP that lacks an SSL/TLS certificate, meaning all traffic is unencrypted. Nameservers miki.ns.cloudflare.com and razvan.ns.cloudflare.com confirm that the hosting infrastructure is fully delegated to Cloudflare. The public page title reads “Stake1: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the classified scam type “Crypto Scam” and the observed phishing kit labeled “Gambler Scam.” VirusTotal has recorded 14 detections out of 93 scanners, indicating that a minority of security engines flag the domain as malicious.

The domain appears on one external security blocklist and has been added to the PhishDestroy blocklist, reinforcing its classification as a threat. Gridinsoft’s trust score of 0 / 100 further reflects a high confidence of malicious intent. The site’s current status is offline, but historical activity suggests it was used to lure victims into depositing cryptocurrency under the pretense of a legitimate casino, then draining the funds. Defenders should continue to block resolution of stake1.cc at the DNS level, enforce TLS inspection policies to detect any future unencrypted attempts, and monitor traffic to the associated Cloudflare IP for residual command‑and‑control or exfiltration patterns.

Because the domain’s registration is recent and the hosting is on a shared Cloudflare edge, similar look‑alike domains may be created using the same kit; threat‑intel feeds should be updated with the observed indicators of compromise, including the IP address, nameservers, registrar, and the specific kit name. Organizations that have exposed cryptocurrency wallets or have users who engage in online gambling should audit recent transaction logs for unauthorized transfers that could be linked to this campaign.