silverstake[.]top

The domain silverstake.top is currently flagged as a crypto‑drainer infrastructure. The site was registered on 21 November 2024 through Web Commerce Communications Limited and resolves to the IPv6 address 2606:4700:3036::6815:e51, which is advertised as belonging to AS13335 (Cloudflare, Inc.) and geolocated in the United States. The page title returned from the live host reads “Silverstake: Most Popular Online Crypto Casino Based on Blockchain,” indicating a targeted lure toward cryptocurrency users. No TLS certificate is presented; the service is reachable only over HTTP, which reduces transport‑layer integrity and may facilitate credential harvesting. Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme suspicion.

The domain appears on a single external security blocklist and has been explicitly blocked by PhishDestroy. AlienVault OTX reports the domain in one threat‑intel pulse, confirming its inclusion in known malicious feeds. VirusTotal analysis shows that 13 of 93 scanned security vendors label the domain as malicious, reinforcing the consensus of risk. The domain is associated with the “Gambler Scam” phishing kit, a known template used to impersonate crypto‑gaming platforms and exfiltrate funds. Nameservers are javon.ns.cloudflare.com and melinda.ns.cloudflare.com, both under Cloudflare’s control, which is consistent with the hosting ASN.

The registrar, registrar‑level metadata, and the lack of SSL suggest a rapid deployment typical of opportunistic crypto‑drain campaigns. The current operational status is offline, but historical activity indicates that threat actors may reactivate the site or clone its infrastructure. Defenders should immediately block silverstake.top at DNS, firewall, and proxy layers, monitor outbound connections for attempts to resolve the IPv6 address, and update intrusion‑detection signatures to flag HTTP requests containing the observed page title.