comp[.]stakingsrewards[.]club

Analysis of comp.stakingsrewards.club shows it was registered on 21 February 2026 and subsequently resolved to the IP address 142.250.64.100, which is owned by Google LLC (ASN 15169) and geolocated in the United States. The domain presented a TLS certificate identified as WR2, and the HTTP response returned a page title of Google, matching the declared brand target. VirusTotal records indicate that 14 of 93 scanning engines flagged the host, and the domain appears on a single external blocklist. It has also been added to the PhishDestroy blocklist, confirming that active mitigation has been applied.

Gridinsoft assigned a trust score of 0 out of 100, and the listed scam type is credential phishing, consistent with an attempt to harvest Google account credentials. The site is currently offline, which prevents direct inspection of the payload, but the available metadata is sufficient to classify the domain as a confirmed Google‑impersonating credential‑phishing resource. Defenders should continue to block the domain at DNS and proxy layers, monitor the associated IP for any reuse, and add the host to internal allow‑list exclusions for legitimate Google services.

Because the certificate and IP belong to Google’s own infrastructure, the malicious operator likely leveraged legitimate hosting to increase credibility, a technique that can be repeated on other Google‑owned IP ranges. Ongoing threat‑intel feeds should be consulted for any re‑registration attempts or similar domains that reuse the same naming pattern. Until the domain is permanently taken down, organizations should treat any traffic to the host as malicious and enforce multi‑factor authentication for Google accounts to mitigate credential compromise.