dot[.]stakingsrewards[.]club
“Google”
dot.stakingsrewards.club — Contenu indisponible. Usurpation de l'identité de la marque : Google; Type d'arnaque : Credential Phishing. Résumé des preuves: VirusTotal 17/93 (ADMINUSLabs, ChainPatrol, BitDefender, CRDF, CyRadar); PhishDestroy score 95/100.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
This domain, dot.stakingsrewards.club, is flagged as a brand-impersonation threat targeting Gmail users. Analysis indicates it operates as a fraudulent login portal designed to harvest credentials by replicating the Google authentication interface. The page title explicitly displays 'Google,' reinforcing the deception to trick users into entering sensitive account details. No direct evidence of a drainer kit was observed, but the infrastructure aligns with credential-phishing campaigns commonly deployed in targeted attacks. Infrastructure analysis reveals multiple technical indicators of compromise. The domain was registered on February 21, 2026, an unusually forward-dated creation that may suggest registrar manipulation or fraudulent pre-registration. It resolves to the IP address 172.253.62.103, which is hosted on AS15169 (Google LLC), though this appears to be a misdirection or hijacked routing, as the legitimate Google infrastructure does not host this domain. VirusTotal detection shows 17 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently blocked by at least one threat intelligence feed. The SSL certificate is classified as WR2, indicating a weak or untrusted encryption standard, further degrading its legitimacy. As of the latest assessment, dot.stakingsrewards.club has been taken offline, likely due to takedown actions or hosting provider intervention. However, the residual risk remains elevated due to the domain's recent activity and the potential for re-emergence under altered infrastructure. Users who may have interacted with this domain are advised to reset their Gmail credentials immediately and enable multi-factor authentication. Organizations should monitor for unauthorized access attempts linked to this domain and update internal blocklists to prevent future exposure. The combination of brand impersonation, weak SSL certification, and anomalous IP resolution underscores the need for continued vigilance against similar threats.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Analyse VirusTotal
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif