kite[.]stakingsreward[.]org

On July 23, 2026 the domain kite.stakingsreward.org was observed as an offline credential‑phishing site that impersonates Google. The domain was registered on February 21, 2026 and immediately resolves to the IP address 74.125.130.103, which belongs to AS15169 Google LLC and is geolocated in Singapore. The hosting IP is part of Google's infrastructure, suggesting that the attacker may have leveraged a compromised host or abused a legitimate cloud service. The site presented a page title of "Google," reinforcing the brand‑impersonation intent, but the actual page content has not been captured because the site is no longer reachable.

Security telemetry indicates the domain appears on a single blocklist and has been blocked by PhishDestroy. The Gridinsoft trust score for the domain is 0 out of 100, reflecting a severe lack of credibility. VirusTotal analysis shows that 13 of 93 scanning engines flagged the domain as malicious, providing additional corroboration of its phishing nature. The SSL certificate associated with the domain is identified only as "WR2," offering no further validation of legitimacy.

Defenders should continue to block the domain at network perimeters and update any URL filtering or DNS sinkhole policies. Monitoring of the hosting IP for other suspicious activity is advised, as the same address could host additional malicious payloads. Because the site is offline, investigators cannot obtain a snapshot of the landing page, so the exact credential‑collection mechanisms remain unknown. Threat intelligence feeds should be queried for related domains that share the same registrar, creation date pattern, or similar sub‑domain structures to anticipate potential re‑use of the same impersonation tactics.