stakiva[.]live

This domain, stakiva.live, was observed hosting a page titled “Stakiva: Most Popular Online Crypto Casino Based on Blockchain”. The site presented no TLS certificate, indicating that traffic was unencrypted and that the operator did not obtain a valid SSL, a common characteristic of fraudulent deployments. The domain resolves to 104.21.93.20, an address owned by Cloudflare (AS13335) located in the United States. Nameserver records point to brenda.ns.cloudflare.com and guss.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. Registration data show the domain was created on 13 October 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED.

Reputation services have assigned a Gridinsoft trust score of 0 out of 100, and the domain is listed on a single security blocklist. VirusTotal scans reported 14 detections out of 93 submitted engines, reinforcing the malicious assessment. The payload is associated with the “Gambler Scam” phishing kit and is classified as a crypto‑related scam. PhishDestroy has already taken the domain offline, and current status indicates it is no longer reachable. Analysts must treat stakiva.live as a high‑confidence indicator of a crypto‑casino fraud campaign.

The lack of SSL, low trust score, and multiple vendor detections suggest an active attempt to lure victims into depositing cryptocurrency under false pretenses. Defenders should add the domain to DNS and URL filtering policies, monitor for any future sub‑domains or aliases that resolve to the same Cloudflare IP range, and inspect outbound traffic for connections to Cloudflare‑hosted services that may be leveraged for command‑and‑control. Because the site is presently offline, further content collection is limited; however, the presence of the Gambler Scam kit implies that similar infrastructures may be reused elsewhere. Continuous threat‑intel feeds should be consulted for updates on related domains or indicators of compromise.