wormhole[.]stakingsreward[.]art

This domain, wormhole.stakingsreward.art, was identified as a credential phishing site targeting Google users. Registered on February 21, 2026, the domain appeared on one security blocklist (PhishDestroy) and was flagged by 16 of 93 security vendors on VirusTotal. The page title displayed as 'Google,' aligning with the confirmed brand impersonation. Infrastructure analysis reveals the domain resolved to IP 142.251.140.164, hosted on AS15169 (Google LLC) in Germany, though this does not confirm legitimacy of the hosting context.

The SSL certificate was issued under the identifier 'WE2,' which provides no additional trust indicators. As of July 23, 2026, the domain is offline, reducing immediate exposure risk. Defenders should treat this domain as malicious based on detection volume and blocklist inclusion. No evidence confirms the exact phishing kit used or the full scope of credentials targeted.

The domain's registration age (5 months at time of detection) suggests it was operational long enough to pose a threat before takedown. Network defenders should block the domain and associated IP at perimeter controls, and monitor for related infrastructure reuse under new domains. No further page content analysis is available, limiting assessment of specific lures or user interaction flows.