v3-stakestone[.]org

Analysis as of July 24, 2026 indicates that the domain v3-stakestone.org is actively hosted and displays several concrete indicators of a high‑risk crypto drainer operation. The domain was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is served by Cloudflare nameservers rosa.ns.cloudflare.com and will.ns.cloudflare.com. DNS resolution points to the IP address 104.21.3.221, which belongs to Cloudflare, Inc. in Canada, and the site delivers an HTTP 302 response, suggesting a redirection step commonly used in malicious campaigns. The page title observed is "www.www.v3-stakestone.org", which does not reveal any legitimate brand or service and reinforces the lack of a trustworthy front end.

Infrastructure analysis shows the site runs Cloudflare services and HTTP/3, a stack frequently leveraged to obscure malicious traffic. Reputation data adds weight: the domain appears on three security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, all of which target crypto‑related fraud. A Gridinsoft trust score of 0 / 100 further highlights the domain’s poor standing. Although 93 antivirus vendors scanned the site on VirusTotal without producing detections, the absence of alerts does not mitigate the documented malicious indicators.

Overall, the observable evidence—recent registration, Cloudflare‑based hosting, redirection behavior, blocklist presence, and low trust scoring—strongly supports the classification as a crypto drainer scam. Defenders should block the domain at network perimeters, monitor DNS queries for the associated IP, and add the domain to endpoint and browser protection lists. Continuous re‑evaluation is advised, as threat actors may modify hosting or redirection patterns, but current data warrants immediate preventive action.