stadifivip[.]top

Analysis indicates that the domain stadifivip.top was registered on February 21, 2026 through NiceNIC International Group Co., Limited. The authoritative nameservers are laylah.ns.cloudflare.com and sid.ns.cloudflare.com, pointing to Cloudflare’s network (AS13335) with the resolve address 188.114.96.3 located in the United States. No SSL certificate is presented, and the site is currently taken offline, returning no HTTP response. The page title captured during the brief availability period reads “Stadifivip: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the declared scam type of a crypto‑focused gambling operation. Security‑vendor scans on VirusTotal recorded 13 detections out of 95 scanners, and the domain is listed on the PhishDestroy blocklist as well as one additional security blocklist.

Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent. The infrastructure matches the known “Gambler Scam” phishing kit, suggesting the site was built from a template targeting cryptocurrency enthusiasts. While the precise content of the landing page has not been retained, the combination of a high‑risk kit, multiple vendor detections, lack of TLS, and immediate blocklisting provides strong evidence that the domain was used for phishing or credential harvesting against crypto casino users. Uncertainty remains regarding the extent of victim interaction, the presence of secondary payloads, or any command‑and‑control infrastructure, as no additional indicators such as malware hashes or C2 domains have been disclosed.

Defenders should continue to block the domain at network perimeters, monitor DNS queries for the associated IP address and Cloudflare nameservers, and update threat‑intelligence feeds with the observed indicators. Additional monitoring of any future re‑registration of the same name or similar branding is advised, as threat actors frequently recycle compromised brand imagery.