# rls.stakingrewards.biz — MALICIOUS > rls.stakingrewards.biz is linked to phishing scams and flagged by security tools. Avoid interacting with this domain and stay vigilant online. ## Summary PhishDestroy identifies rls.stakingrewards.biz as a high-risk phishing domain targeting unsuspecting users. This site deceptively presents itself with a page titled "Google" to mislead visitors, aiming to capture sensitive information such as login credentials or personal details. The domain's association with phishing attempts places it among active threats that compromise user security. Technically, rls.stakingrewards.biz was registered recently on February 21, 2026, and resolves to the IP address 172.253.62.104. It appears on two separate security blocklists and is flagged by 12 out of 95 security vendors on VirusTotal, signaling a broad consensus regarding its malicious nature. The use of a seemingly reputable page title underscores the domain's attempt to impersonate legitimate services to increase the likelihood of user deception. Currently, rls.stakingrewards.biz remains active and continues to pose a significant threat. Users are strongly advised to avoid visiting the domain or submitting any data. Security teams should consider blocking this domain at network perimeters and updating phishing filters accordingly. Continuous monitoring and user education remain critical to mitigating risk from such deceptive sites. ## Threat Details - Verdict: MALICIOUS - Site status: alive (HTTP 530) - Page title: Google ## Domain Intelligence - Registered: 2026-02-21 07:01:08 - IP: 172.253.62.104 - SSL Issuer: WR2 ## Detection Status - VirusTotal: 12 vendors flagged Vendors: ["ADMINUSLabs", "ChainPatrol", "CRDF", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Seclookup", "SOCRadar", "Sophos", "Webroot"] - Google Safe Browsing: clean - Blocklists: 2 hits Lists: ["PhishDestroy", "MetaMask"] ## Evidence - Screenshot: https://urlscan.io/screenshots/019baed3-92b7-76ab-ba60-3eaeb1371fca.png - PhishDestroy: https://phishdestroy.io/domain/rls.stakingrewards.biz/ - LLM endpoint: https://phishdestroy.io/domain/rls.stakingrewards.biz/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/rls.stakingrewards.biz/ Last updated: 2026-03-19