xlm[.]stakingsreward[.]art

Analysis indicates that the domain xlm.stakingsreward.art was actively impersonating Google as part of an investment scam operation. The domain resolved to IP 142.251.141.100, which is registered under AS15169 (Google LLC) in the United States. This infrastructure alignment with Google’s network may have been exploited to lend false legitimacy to the scam. The domain was created on February 21, 2026, and was flagged by 15 of 93 security vendors on VirusTotal, suggesting detection by multiple threat intelligence sources.

It appeared on one security blocklist and was blocked by PhishDestroy. The SSL certificate was issued under the identifier WE2, though no further certificate details are available to assess its validity. The page title displayed as 'Google,' reinforcing the brand impersonation.

The site has since been taken offline, but defenders should treat any residual references to this domain as malicious. Historical DNS and WHOIS records should be reviewed for connections to other scam domains, particularly those leveraging Google’s infrastructure or targeting investment-related fraud. No evidence of a phishing kit or additional page content is available for further classification.