cakepay[.]site

The domain cakepay.site was registered on May 25, 2026 through the registrar Spaceship, Inc. It is hosted on the IP address 178.16.53.154 and delegated to the authoritative nameservers ns1.gcorelabs.net and ns2.gcdn.services. As of the report date, the domain remains active and is classified as a generic phishing threat with a high risk rating. Infrastructure analysis shows that the domain is present on three security blocklists and has been explicitly blocked by the phishing mitigation services PhishDestroy, MetaMask, and SEAL, indicating that multiple protective platforms have observed malicious activity originating from this host.

VirusTotal scans have recorded eight positive detections out of ninety‑one security vendors, confirming that a subset of scanning engines have identified the domain as malicious. The available intelligence does not include a page title, SSL certificate details, HTTP status code, or content analysis, so the exact phishing lure and any associated brand impersonation remain unknown.

Defenders should treat cakepay.site as hostile infrastructure: network firewalls and DNS resolvers ought to deny or sinkhole queries for the domain, endpoint security suites should be updated to include the domain and its IP address in blocklists, and traffic monitoring tools should alert on any outbound connections to 178.16.53.154. Continuous re‑evaluation is advised, as additional detections or content disclosures may emerge, but the current evidence already warrants immediate preventive action.