stake-tezos[.]com

The domain stake-tezos.com was registered on March 27, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. It resolves to the IP address 188.114.97.3, which is hosted by CloudFlare, Inc. in Canada. The domain is served by Cloudflare’s authoritative nameservers alina.ns.cloudflare.com and julio.ns.cloudflare.com, and presents an SSL certificate issued by Google Trust Services under the WE1 root, indicating a legitimate‑looking HTTPS endpoint.

When accessed, the site returns an HTTP 403 status and displays the page title "Just a moment...". Automated reputation checks assign a Gridinsoft trust score of 0 out of 100, reflecting a severely low confidence rating. VirusTotal analysis shows that 2 of 95 security vendors flagged the domain, and the domain appears on a single security blocklist. It has also been listed in one AlienVault OTX pulse and is blocked by the PhishDestroy mitigation service. The threat type is identified as a crypto drainer, specifically a staking scam targeting users of the Tezos ecosystem.

These observable indicators suggest that the infrastructure is purpose‑built to mimic legitimate staking services, likely to lure victims into authorizing token transfers. While the exact malicious payload or phishing page content has not been recovered, the combination of a recent registration, low trust scores, and active blocking by multiple security feeds strongly points to a high‑risk operation. Defenders should add stake-tezos.com to domain blocklists, monitor traffic to the associated IP 188.114.97.3, and enforce strict verification of staking URLs in user communications. Continuous threat‑intel feed updates are recommended to capture any new indicators tied to this infrastructure.