sca[.]stakingsreward[.]org

This domain, sca.stakingsreward.org, poses a credential theft risk by impersonating the Gmail login interface. Visitors are presented with a fraudulent page designed to harvest Google account credentials, potentially leading to unauthorized access, data exfiltration, or further targeted attacks. The site mimics legitimate Google branding, increasing the likelihood of successful deception for unsuspecting users. Analysis indicates the domain was registered on December 27, 2025, through Dynadot LLC, a registrar commonly associated with malicious infrastructure. It resolves to the IP address 142.250.184.196, hosted under AS15169 (Google LLC), though this appears to be a misdirection or abuse of hosting services. At the time of assessment, 13 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist. The absence of an SSL certificate further signals its illegitimate nature, as modern phishing sites typically employ encryption to appear credible. If you visited sca.stakingsreward.org and entered login credentials, take immediate action to secure your account. First, change your Gmail password using a trusted device and enable multi-factor authentication if not already active. Review recent account activity for unauthorized logins or suspicious actions, such as sent emails, rule modifications, or connected applications. Monitor linked accounts, including financial or social media platforms, for signs of compromise. Consider revoking access to any unfamiliar third-party apps associated with your Google account. If financial or sensitive data was exposed, report the incident to relevant authorities and credit monitoring services. Finally, scan your device for malware, as phishing sites may deploy additional payloads.