stake-bomb[.]com

The domain stake-bomb.com has been identified as a confirmed brand impersonation site targeting users of crypto gambling platforms. Analysis indicates this infrastructure was designed to mimic legitimate decentralized Web3 gambling services, specifically impersonating the Stake brand. The domain is currently offline, but prior activity raises significant concerns regarding fraudulent financial transactions and credential harvesting. Infrastructure analysis reveals the domain was registered on June 9, 2026, through Fewmoretaps OU d/b/a Trustname.com, and resolved to the IP address 172.67.165.227. Security telemetry shows the site was flagged by 4 of 95 vendors on VirusTotal and appeared on at least one security blocklist. The domain employed tracking technologies including Twitter Ads and Facebook Pixel, alongside Cloudflare Browser Insights and Cloudflare hosting services. The SSL certificate was issued by Google Trust Services, and the page title explicitly promoted itself as a 'Decentralized Web3 Gambling Site with Provable Trust.' Current status indicates the domain has been taken offline, likely due to enforcement actions. However, residual risk remains for users who may have interacted with the site prior to its removal. Organizations and individuals are advised to monitor for unauthorized transactions, revoke any credentials potentially exposed through this domain, and implement additional verification steps for crypto-related financial activities. Security teams should update blocklists to include this domain and associated indicators of compromise, such as the resolved IP address and registrar details.