MALICIOUS — HIGH
coinbase-crypto-staking[.]org
6 of 95 security engines flagged the domain; the latest stored check returned HTTP 502.
- VirusTotal
- 6/95
- Blocklists
- No stored match
- Disponibilità
- Contenuto non disponibile · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
coinbase-crypto-staking.org — Contenuto non disponibile (HTTP 502). Simulazione del marchio: Coinbase; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 6/95 (ChainPatrol, alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker); PhishDestroy score 68/100. Registrar: Dynadot.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Digest
coinbase-crypto-staking.org is classified high with an evidence score of 68/100. 6 of 95 security engines flagged the domain. Registered 18 Oct 2025 via Dynadot LLC, hosted on 198.18.0.150 (CLOUDFLARENET, US, --). The latest stored check on 9 Aug 2026 returned HTTP 502 and includes a capture.
Stored generated summary (templated)mistral · 23/07/2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
Analysis of the domain coinbase-crypto-staking.org indicates a confirmed crypto scam impersonating Coinbase, with infrastructure designed to deceive users into fraudulent staking activities. The domain was registered on October 18, 2025, through Dynadot LLC, and resolves to the IP address 198.18.0.150, a network segment often associated with ephemeral or suspicious hosting. No SSL certificate was detected, increasing the risk of unencrypted data interception. Nameservers ns1.dyna-ns.net and ns2.dyna-ns.net further suggest a pattern of low-cost, disposable infrastructure commonly used in phishing and scam operations. The domain is currently offline, returning a 522 connection timeout error, which may indicate takedown efforts or temporary suspension by the hosting provider.
PhishDestroy has blocked the domain, and it appears on at least one security blocklist. Gridinsoft’s trust score of 0/100 reinforces its classification as malicious. While VirusTotal reports six security vendors flagging the domain, the absence of broader detection does not diminish the risk, as many scam domains evade detection during early deployment phases. The page title, 'coinbase-crypto-staking.org | 522: Connection timed out,' confirms the domain’s intent to mimic Coinbase’s branding, targeting users seeking crypto staking services.
The scam type is explicitly categorized as a crypto scam, aligning with known fraudulent schemes involving fake staking platforms. Defenders should treat this domain as high-risk, particularly for users engaging with cryptocurrency services. Monitoring for re-emergence under similar domains or IP ranges is recommended, along with blocking resolutions to 198.18.0.150 and associated nameservers. Further investigation into the hosting provider and registrar may reveal additional linked infrastructure.
Copertura dei dati13 recorded checks
Indicatori di sicurezza
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Informazioni forensi
Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.