stadifi[.]pro

Analysis of the domain stadifi.pro indicates it was hosting a fraudulent crypto‑casino page titled “Stadifi: Most Popular Online Crypto Casino Based on Blockchain.” The site is currently offline, having been taken down after detection by the PhishDestroy blocklist. Infrastructure mapping shows the domain resolved to the IP address 104.21.60.96, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. No SSL certificate was observed, and the nameserver configuration is not publicly disclosed.

Registration records list Web Commerce Communications Limited as the registrar, confirming a legitimate‑looking registration path often leveraged by malicious actors. VirusTotal scans returned 16 positive detections out of 95 security vendors, reflecting a moderate level of consensus among malware and phishing scanners. The domain appears on a single security blocklist and has been referenced in one AlienVault OTX pulse, further corroborating its association with malicious activity.

Threat intelligence tags the campaign as a crypto scam employing the Gambler Scam phishing kit, which is commonly used to lure victims into depositing cryptocurrency on fake gambling platforms. Defenders should continue to block the domain at perimeter defenses, monitor traffic to the associated Cloudflare IP range, and update URL filtering rules to include the observed page title and registrar details. Given the lack of SSL and the unknown nameserver data, future re‑hosting attempts could surface on different IPs; continuous passive DNS monitoring is recommended to detect any re‑registration or relocation of the domain.