stakedrop[.]shop
“Nexchain Dashboard – Manage Your Crypto Assets”
Résumé des preuves
Analysis of stakedrop.shop indicates this domain was actively used for crypto-draining phishing operations targeting cryptocurrency users. The domain, registered on May 16, 2025, through Name.com, Inc., resolved to IP address 63.176.8.218, hosted on Amazon.com, Inc. infrastructure (AS16509) in Germany. DNS resolution was managed via NS1 nameservers (dns1.p06.nsone.net through dns4.p06.nsone.net). The site presented itself as 'Nexchain Dashboard – Manage Your Crypto Assets,' a title consistent with cryptocurrency wallet or portfolio management interfaces, though no further page content analysis is available to confirm specific functionality or branding beyond this title.
At the time of assessment, stakedrop.shop was flagged by two of 95 security vendors on VirusTotal, with additional detections on two independent security blocklists: PhishDestroy and ScamSniffer. The domain's SSL certificate was issued by Let's Encrypt (serial number E8), a common choice for both legitimate and malicious sites due to its free and automated nature. Infrastructure analysis reveals no anomalous hosting patterns, but the use of a major cloud provider aligns with observed tactics in crypto-related phishing campaigns, where threat actors leverage scalable, ephemeral hosting to evade takedowns. The domain is currently offline, though this status may change.
Defenders should treat stakedrop.shop as confirmed malicious infrastructure and update blocklists accordingly. Given the domain's association with crypto-draining activity, organizations handling cryptocurrency transactions or wallet services should prioritize monitoring for related domains using similar naming conventions (e.g., 'stakedrop,' 'nexchain') or infrastructure patterns. No evidence links this domain to broader phishing kits or actor groups, and further attribution is not possible with available data. Registrar and hosting provider logs, if preserved, may offer additional investigative value for tracking related activity.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 13/08/2026
9 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
-
VirusTotal
2 → 1
-
VirusTotal
0 → 2
-
État du domaine
Accessible → Inaccessible
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif