plume[.]stakingsreward[.]life

This report analyzes the domain plume.stakingsreward.life, which presents a page titled "Google" and is classified as a Google Phishing scam. The site is designed to impersonate the Google brand, likely to deceive users into entering credentials or other sensitive information by mimicking Google's login or authentication interface. The threat is direct credential theft, as the site exploits trust in the Google brand to harvest user data.

Technical evidence confirms the malicious nature of the site. VirusTotal reports 12 detections out of 95 security vendors, indicating significant malicious classification. The domain was registered on 2025-12-11 through Dynadot LLC, a relatively recent creation date typical for phishing infrastructure. The IP address 64.233.170.99 is hosted in Singapore under AS15169 Google LLC, and the SSL certificate is issued by Google Trust Services. Nameservers are alexa.ns.cloudflare.com and randall.ns.cloudflare.com. The site has been flagged by ADMINUSLabs, ChainPatrol, alphaMountain.ai, Certego, and CRDF, and appears on one blocklist.

The domain is currently reported as DOWN or OFFLINE, indicating it is not accessible. The risk level is high due to its impersonation of a trusted brand and confirmed detections, though its offline status reduces immediate threat. Users should remain vigilant against similar domains and avoid entering credentials on untrusted sites.