stakestone[.]cash

Analysis of stakestone.cash indicates that the domain is associated with a crypto drainer operation. The site was registered on February 21, 2026 and is presently offline, suggesting a recent takedown or temporary suspension. The page title returned by the server, "StakeStone - Staking But More," aligns with the declared scam type of a crypto scam, implying a deceptive offering related to staking services.

Infrastructure inspection shows the domain resolves to IP address 172.67.177.125, which belongs to AS13335 operated by Cloudflare, Inc., a common hosting choice for threat actors seeking to obscure origin. The SSL certificate is rated E1, a low trust score that further diminishes confidence in the site’s legitimacy. The domain appears on three independent security blocklists and has been actively blocked by PhishDestroy, ScamSniffer, and Enkrypt, confirming that multiple threat‑intelligence providers have identified malicious activity.

VirusTotal scanned the domain with 93 antivirus engines and reported no detections; however, the lack of alerts does not constitute evidence of safety, especially given the corroborating blocklist entries and the explicit crypto drainer classification. Defenders should continue to block the domain at network perimeter and endpoint layers, monitor for any residual traffic to the Cloudflare IP, and treat any communications referencing "StakeStone" or related staking incentives as suspicious. Ongoing observation is recommended to detect potential re‑hosting or migration to alternative infrastructure, as threat actors often recycle domains after takedown.