sca[.]stakingsreward[.]art

Analysis of sca.stakingsreward.art indicates a credential phishing operation impersonating Google. The domain was registered on February 21, 2026, and resolves to IP 142.250.186.132, which is hosted on AS15169 (Google LLC) infrastructure in the US. The page title captured from the site was 'Google,' aligning with the reported brand impersonation target. No phishing kit or additional page content has been confirmed, but the domain was flagged by 15 of 93 security vendors on VirusTotal and appears on at least one security blocklist.

The SSL certificate is classified as WE2, a low-trust indicator often associated with malicious or short-lived domains. GridinSoft assigned a trust score of 0/100, further supporting the phishing classification. The domain is currently offline, though this status may change.

Defenders should treat this domain as a confirmed phishing threat, particularly for credential harvesting targeting Google users. Monitoring for re-activation or related infrastructure (e.g., subdomains, linked IPs) is recommended. No evidence suggests broader campaign activity beyond this single domain, but historical DNS and WHOIS records should be preserved for forensic analysis.