stake[.]lixo[.]fi

The domain stake.lixo.fi was registered through Key-Systems GmbH on May 26, 2026 and currently resolves to the IP address 172.67.169.101. DNS queries return no nameserver records (NS_NOT_FOUND), indicating that the authoritative name server information is unavailable or deliberately concealed. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service.

VirusTotal analysis shows that the site was scanned by 91 antivirus and URL‑reputation engines; none of these vendors raised a detection at the time of scanning, though the absence of detections does not constitute evidence of legitimacy. No public data is available regarding the site’s SSL certificate, HTTP response codes, or page title, and no additional intelligence such as OTX tags or external reputation scores has been published. The limited visibility combined with the recent creation date suggests an emerging threat infrastructure focused on cryptocurrency extraction.

Defenders should consider adding 172.67.169.101 to network‑level deny lists, monitoring DNS queries for stake.lixo.fi, and applying URL filtering rules that reference the domain’s blocklist entry. Continuous re‑evaluation is advised, as future scans may yield detections or the site may begin serving payloads that alter its risk profile.