neonstakes[.]cc

Analysis of neonstakes.cc, flagged on July 23, 2026 as a crypto drainer, shows a domain created on October 30, 2025 and presently taken offline. The domain resolves to the IP address 172.67.215.120, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No SSL certificate is presented for the site, indicating unencrypted HTTP communication. The registrar listed for the domain is CNOBIN INFORMATION TECHNOLOGY LIMITED, and the authoritative name servers are elle.ns.cloudflare.com and tosana.ns.cloudflare.com.

VirusTotal records indicate that 14 of 93 security vendors have flagged the domain, reflecting a moderate level of detection across independent scanners. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The domain appears on a single security blocklist and has been specifically blocked by PhishDestroy. AlienVault OTX references the domain in one threat intelligence pulse, adding an additional source of corroboration.

The page title retrieved during the scan is "Neonstakes: Most Popular Online Crypto Casino Based on Blockchain," and the underlying phishing kit is identified as the Gambler Scam package, a known template used to lure victims into cryptocurrency‑draining schemes. While the site is currently offline, the combination of vendor detections, blocklist inclusion, low trust score, and the presence of a known scam kit constitute strong evidence of malicious intent. Defenders should continue to monitor the IP address and associated Cloudflare range for any re‑hosting activity, enforce blocking of the domain at perimeter defenses, and include the domain in threat‑intel feeds. Additional investigation may be required to determine if related domains share the same registrar or hosting configuration, which could indicate a broader campaign infrastructure.