coinbase-crypto-staking[.]org

Analysis of the domain coinbase-crypto-staking.org indicates a confirmed crypto scam impersonating Coinbase, with infrastructure designed to deceive users into fraudulent staking activities. The domain was registered on October 18, 2025, through Dynadot LLC, and resolves to the IP address 198.18.0.150, a network segment often associated with ephemeral or suspicious hosting. No SSL certificate was detected, increasing the risk of unencrypted data interception. Nameservers ns1.dyna-ns.net and ns2.dyna-ns.net further suggest a pattern of low-cost, disposable infrastructure commonly used in phishing and scam operations. The domain is currently offline, returning a 522 connection timeout error, which may indicate takedown efforts or temporary suspension by the hosting provider.

PhishDestroy has blocked the domain, and it appears on at least one security blocklist. Gridinsoft’s trust score of 0/100 reinforces its classification as malicious. While VirusTotal reports six security vendors flagging the domain, the absence of broader detection does not diminish the risk, as many scam domains evade detection during early deployment phases. The page title, 'coinbase-crypto-staking.org | 522: Connection timed out,' confirms the domain’s intent to mimic Coinbase’s branding, targeting users seeking crypto staking services.

The scam type is explicitly categorized as a crypto scam, aligning with known fraudulent schemes involving fake staking platforms. Defenders should treat this domain as high-risk, particularly for users engaging with cryptocurrency services. Monitoring for re-emergence under similar domains or IP ranges is recommended, along with blocking resolutions to 198.18.0.150 and associated nameservers. Further investigation into the hosting provider and registrar may reveal additional linked infrastructure.