cryptostakebg[.]com

The domain cryptostakebg.com was registered on February 21, 2026 through NameCheap, Inc. and is currently offline. DNS resolution points to the IP address 65.109.5.64, which belongs to the Hetzner Online GmbH network (AS24940) located in Finland. The domain uses Cloudflare’s authoritative nameservers jay.ns.cloudflare.com and jean.ns.cloudflare.com, and serves content over HTTPS with a Let’s Encrypt certificate (R12). An HTTP request to the site returned a 200 status code and the page title "CryptoStake - Secure USDT Staking Platform," indicating the site was presented as a USDT staking service.

Technical fingerprints show a stack comprising Node.js, Express, Nginx, and HTTP Strict Transport Security (HSTS). Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist. It has been flagged by PhishDestroy and was detected by one of ninety‑five VirusTotal scanners, suggesting at least one vendor identified malicious behavior. The classification in the intelligence set labels the activity as a crypto scam, specifically a crypto drainer.

While the offline status prevents direct verification of the landing page content, the combination of a fresh registration, low trust score, TLS certificate issuance, and the presence of server‑side technologies commonly used by malicious actors provides sufficient context for defensive action. Security teams should block the domain at perimeter and DNS layers, monitor the associated IP range for any related activity, and add the domain to internal threat intelligence feeds. Analysts should also flag any traffic to the Cloudflare nameservers that resolves to the Hetzner IP as suspicious, and consider correlating logs for attempts to interact with USDT staking services to detect potential victimization attempts.