stake1100[.]com

Stake1100.com was registered on 21 February 2026 and currently resolves to the Amazon Web Services address 52.223.13.41, which is announced by AS16509 (Amazon.com, Inc.) and geolocated in the United States. The domain presents a Go Daddy Secure Certificate Authority – G2 TLS certificate, indicating that a legitimate public‑key infrastructure was used for encryption, but this does not mitigate its malicious purpose. Analysis by VirusTotal shows that four of ninety‑three scanning engines flagged the domain as malicious, confirming that at least a subset of security products recognise it as a threat. The domain is listed on a single public blocklist, PhishDestroy, and the Gridinsoft trust score assigns a rating of zero out of one hundred, reflecting an extremely low reputation.

The site has been classified as a “Crypto Scam” and is associated with the “crypto drainer” threat type, suggesting that it attempts to illicitly obtain cryptocurrency from victims. As of the report date, the domain is offline, which may indicate that the operators have taken it down or are rotating infrastructure. However, the underlying hosting provider (AWS) and the IP address remain active, allowing adversaries to recreate the service quickly.

Defenders should continue to block the domain and the associated IP address at network perimeter devices, monitor for any renewed DNS resolution to the same AWS address, and incorporate the observed VirusTotal detection pattern into endpoint detection rules. The low trust score and blocklist inclusion also warrant adding the domain to internal blacklists and sharing indicators of compromise with threat‑sharing communities. Because the site’s content has not been captured, the exact phishing lures, page titles, or credential‑capture mechanisms remain unknown, and further sandbox or manual inspection would be required if the domain reappears.