alkimi[.]stakingsrewards[.]club

Analysis indicates that the domain alkimi.stakingsrewards.club was registered on 21 February 2026 and is presently taken offline. The site presents the page title “Google”, matching the declared brand target of Google, and is classified as a credential‑phishing campaign that impersonates Google. Infrastructure analysis shows the domain resolves to the IP address 142.250.176.196, which belongs to the AS15169 Google LLC network located in the United States. The use of a Google‑owned IP range may be an attempt to lend credibility to the malicious site, although the hosting appears to be unrelated to any legitimate Google service.

The SSL certificate presented is identified as “WR2”, but no further validation details are available; the certificate does not correspond to a recognized Google certificate chain. The domain is listed on a single public blocklist, PhishDestroy, and has been flagged by 15 of 93 security vendors on VirusTotal, indicating moderate detection across the threat‑intelligence community. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the perception of high risk. No additional evidence such as Safe Browsing alerts, OTX entries, or registrar information is provided beyond the creation date.

Uncertainty remains regarding the exact phishing kit or payload used, as the page content has not been captured and the site is offline. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the same hostname, and add the IP address to reputation‑based deny lists. Given the impersonation of Google and the low trust score, organizations should educate users about unexpected login prompts and enforce multi‑factor authentication for Google accounts. The combination of brand impersonation, use of a Google‑owned IP, and detection by multiple vendors warrants an elevated risk rating.