cyberstoke[.]com

Analysis as of July 26 2026 indicates that cyberstoke.com is currently active and returns an HTTP 200 response for requests to the root URL. The domain registration is listed under NICENIC INTERNATIONAL GROUP CO., LIMITED, and the authoritative DNS records point to Cloudflare’s infrastructure, specifically the nameservers ada.ns.cloudflare.com and jay.ns.cloudflare.com. VirusTotal has recorded three positive detections out of ninety‑one scanning vendors, which constitutes a measurable level of suspicion for malicious use.

The domain is present on a single external security blocklist and is explicitly blocked by the PhishDestroy filtering service, both of which classify it as a phishing‑related resource. No publicly available page title, SSL certificate fingerprint, or underlying IP address has been disclosed, leaving the exact content, targeted brand, or credential‑harvesting mechanism unconfirmed. The combination of multi‑vendor flags, blocklist presence, and active blocking by a dedicated anti‑phishing platform drives the risk assessment to a high level, consistent with the supplied risk rating.

Defensive recommendations include adding cyberstoke.com to URL filtering, DNS sink‑hole, and endpoint web‑proxy blocklists, monitoring network flows to the associated Cloudflare nameservers for anomalous volume, and ingesting the domain into existing threat‑intel platforms for correlation with future indicators. Continued observation is advised, as any change in hosting, page content, or additional vendor detections could modify the threat posture.