stake[.]lodo[.]fi

The domain stake.lodo.fi was registered through Key-Systems GmbH on May 26, 2026 and is currently resolved to the IP address 172.67.163.118. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that it is being used for malicious activity. The registrar information points to a reputable provider, but the lack of publicly resolvable nameservers (NS_NOT_FOUND) suggests the domain may be leveraging custom DNS configurations to obscure its infrastructure.

VirusTotal reports that the domain has been scanned by 91 security vendors, none of which have raised a detection at the time of analysis; however, the absence of detections does not constitute evidence of benign behavior, particularly given the active blocklist presence and the classification of the site as a crypto drainer. The site’s current status is listed as active, implying that the malicious infrastructure remains operational. No additional data such as SSL certificate details, HTTP response codes, Safe Browsing status, or page title is available, leaving several observable attributes unknown.

Defenders should consider adding stake.lodo.fi and its resolving IP 172.67.163.118 to network deny lists, monitoring DNS queries for the domain, and employing heuristic detection for crypto‑drainer patterns. Continuous re‑evaluation is recommended, as the domain may evolve its tactics or expand its hosting footprint.