fil[.]stakingsreward[.]life

Analysis indicates that fil.stakingsreward.life is a phishing domain impersonating the Synapse brand, specifically targeting cryptocurrency wallet credentials and seed phrases. The domain was registered on February 21, 2026, through Dynadot LLC and is currently offline as of July 24, 2026. Infrastructure analysis reveals the domain resolves to IP address 104.21.28.170, hosted on Cloudflare's network (AS13335) in the United States, with nameservers alexa.ns.cloudflare.com and randall.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious domains leveraging Cloudflare.

The page title, 'Filecoin Onchain Cloud,' suggests an attempt to deceive users into believing the site is associated with Filecoin or Synapse-related staking services, though no direct evidence confirms the exact content or functionality of the site. The domain appears on two security blocklists and is flagged by 11 of 93 security vendors on VirusTotal, indicating detection by multiple threat intelligence platforms including PhishDestroy and ScamSniffer. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. The scam type is identified as wallet/seed phishing, a method used to harvest sensitive cryptocurrency wallet information.

Defenders should treat this domain as a confirmed phishing threat. Recommended actions include blocking the domain and associated IP at network and endpoint levels, monitoring for related infrastructure (e.g., subdomains, newly registered lookalike domains), and alerting users to the risk of Synapse-branded phishing campaigns. While the domain is currently offline, historical DNS records and SSL certificates should be preserved for forensic analysis if related incidents are reported. No evidence suggests this domain is part of a broader phishing kit or campaign beyond the provided indicators.