starknetstaking[.]com

The domain starknetstaking.com was registered on February 21, 2026 through NiceNIC International Group Co., Limited. DNS resolution points to 172.67.195.228, an address owned by AS13335 Cloudflare, Inc. and geolocated to the United States. The authoritative nameservers are clay.ns.cloudflare.com and molly.ns.cloudflare.com, indicating the site is fully proxied behind Cloudflare’s network and is served over HTTP/3. The SSL certificate presented is issued by Google Trust Services under the WE1 identifier, confirming the use of a valid TLS certificate.

An HTTP request returns status code 523, suggesting the origin server is unreachable, and the page title returned is "404: This page could not be found." The site is currently listed as taken offline. Threat intelligence records classify the domain as a brand‑impersonation infrastructure targeting the StarkNet ecosystem, with an associated scam type of investment scam. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and it has been flagged by one of ninety‑three vendors on VirusTotal, indicating at least a single detection of malicious behavior. The Gridinsoft trust score is 0 out of 100, reinforcing the low trust assessment.

While the exact malicious payload or phishing lure has not been captured due to the 523 response, the combination of a recent registration, use of a reputable SSL certificate, Cloudflare hosting, and inclusion on multiple blocklists strongly suggests a deliberate attempt to lure StarkNet users into fraudulent investment schemes. Defenders should continue to block the domain at network perimeter devices, update DNS filtering and browser safebrowsing lists, and monitor for any future re‑activation of the domain or related infrastructure. Additional analysis should focus on historic DNS queries and any observed traffic patterns that could reveal the underlying command‑and‑control or payment endpoints.