fuel[.]stakingrewards[.]biz

fuel.stakingrewards.biz was registered on February 21, 2026 and is presently taken offline. The domain resolves to the IP address 142.250.185.196, which is owned by AS15169 Google LLC and geolocated to the United States. An SSL certificate identified as “WE2” is presented for the host, but the certificate details do not match the Google brand and thus do not provide legitimate trust. The page title returned by the site is “Google”, indicating an attempt to impersonate the Google brand.

PhishDestroy flagged the domain and it appears on one external security blocklist. VirusTotal analysis shows that 11 of 95 scanned security vendors flagged the domain, reflecting a non‑trivial detection rate. The threat is categorized as credential phishing and specifically targets Google users, consistent with the brand impersonation label.

While the site is currently offline, the infrastructure—domain registration timing, IP ownership, and SSL mismatch—suggests a purposeful short‑lived campaign aimed at harvesting Google credentials. Defenders should add the domain and its resolved IP to network deny lists, monitor for any resurgence, and verify that internal URL filtering solutions block any future resolution attempts. Continuous observation of related domains registered after February 2026 and correlation with Google‑related phishing alerts are recommended to mitigate potential spillover.