stake[.]lkdo[.]fi

The domain stake.lkdo.fi was observed for the first time on May 26, 2026. Registration data show that the name was created through the registrar Key-Systems GmbH. DNS resolution points to the IPv4 address 188.114.96.3, and the domain currently lacks publicly visible nameserver records (NS_NOT_FOUND). The hosting IP is listed on a single security blocklist and the domain is actively blocked by the PhishDestroy feed.

VirusTotal has processed the domain with 91 antivirus engines; at the time of analysis none of the engines reported a detection. No public Safe Browsing, OTX, SSL certificate, HTTP response code, or trust‑score information is available for this host, and the page title has not been captured in the current intelligence set. The threat classification supplied by the source tags stake.lkdo.fi as a “crypto drainer,” indicating that the site is likely used to lure victims into transferring cryptocurrency to addresses controlled by the attacker. The limited evidence base prevents a full behavioral profile, but the combination of recent creation, use of a reputable registrar, a single blocklist entry, and active blocking by PhishDestroy suggests a purposeful malicious deployment rather than an accidental misconfiguration.

Defenders should add stake.lkdo.fi to local deny lists, monitor DNS queries for the 188.114.96.3 address, and enforce outbound transaction controls for cryptocurrency flows originating from internal endpoints. Continuous re‑checking of VirusTotal, Safe Browsing, and threat‑intel feeds is recommended to capture any future detections or reputation changes. Until further forensic evidence becomes available, the domain should be treated as high‑risk for crypto‑drain activity.