stake[.]zenko[.]world

This domain, stake.zenko.world, is currently classified as a high‑risk crypto drainer operating since its registration on 23 March 2026 through NameCheap, Inc. The site presents the page title “ZENKO STAKING”, suggesting a staking service, but the Gridinsoft trust score of 0 / 100 and eight of ninety‑four VirusTotal scanners flagging the domain indicate malicious intent. Infrastructure analysis shows the domain resolves to 216.150.16.1, an IP owned by Vercel, Inc. in the United States, and the hosting stack includes Node.js, React, Next.js, Webpack and enforced HSTS, all typical of modern web applications but not evidence of wrongdoing by themselves. The SSL certificate is issued by Let’s Encrypt (R13), and HTTP requests receive a 308 permanent redirect, a pattern often used to conceal phishing pages.

The domain is listed on one security blocklist and is actively blocked by PhishDestroy, reinforcing the assessment of an ongoing scam. The nameservers dns1.registrar-servers.com and dns2.registrar-servers.com are generic registrar services, offering no additional mitigation. Defenders should immediately add stake.zenko.world to web‑filter blocklists, monitor DNS queries for the associated IP, and enforce TLS inspection to capture any redirected payload.

Network traffic to Vercel‑hosted IPs originating from internal users should be scrutinized, and any credential or wallet address submissions to the site should be treated as compromised. Continuous threat‑intel feeds should be consulted for any updates, and incident response teams should be prepared to contain potential crypto‑asset theft linked to this domain.