cow[.]stakingsrewards[.]club

This domain, cow.stakingsrewards.club, was registered on 21 February 2026 and is currently taken offline. The sole page title observed is “Google”, indicating a direct impersonation of the Google brand. The site is classified as a credential‑phishing operation, targeting Google user credentials. Technical analysis shows the domain resolves to the IP address 172.253.62.105, which belongs to AS15169 Google LLC and is located in the United States. The hosting IP is owned by Google, a common tactic used to lend legitimacy to malicious pages.

The SSL certificate presented is identified as “WR2”, but no further certificate details are available. A Gridinsoft trust score of 0 out of 100 was recorded, reflecting an extremely low credibility rating. VirusTotal scans have returned detections from 14 of 93 security vendors, and the domain appears on one external blocklist. The phishing‑specific blocklist PhishDestroy has already listed the domain, confirming community‑wide recognition of the threat.

No public Safe Browsing or Open Threat Exchange entries were provided, and no HTTP response codes were captured because the site is offline at the time of analysis. Defenders should immediately block cow.stakingsrewards.club at DNS and firewall layers, monitor for any traffic to the associated IP address, and update detection signatures to include the observed SSL fingerprint and trust‑score indicators. Continuous observation of newly registered domains that resolve to Google‑owned IP ranges is recommended, as this pattern frequently appears in credential‑phishing campaigns. Because the content of the page has not been captured, investigators should treat any future re‑hosting of the domain as potentially malicious until a thorough content review confirms otherwise.