goated[.]stakingsrewards[.]club

Analysis of goated.stakingsrewards.club, registered on 21 Feb 2026, indicates that the domain resolves to the IP address 142.250.190.228, which belongs to Google LLC (ASN 15169) and is geolocated in the United States. The HTTP response returns a page title of "Google" and the site is categorized as a credential‑phishing campaign that seeks Google account credentials. The SSL certificate associated with the site is labeled "WR2", suggesting a weak or improperly issued certificate. Reputation metrics show a Gridinsoft trust score of 0 / 100, and fifteen of ninety‑three VirusTotal scanners have flagged the domain as malicious.

The domain appears on a single public blocklist and is listed as blocked by PhishDestroy. At the time of reporting (23 Jul 2026) the site is offline. The combination of a Google‑owned IP range with a domain that mimics the Google brand raises the possibility of either a compromised Google host or intentional abuse of trusted IP space to increase the perceived legitimacy of the phishing page. No additional hosting infrastructure, CDN services, or secondary IPs have been observed, and the page content beyond the title has not been captured, leaving the exact phishing vector (login form, redirect, etc.) uncertain.

No indicators of malware payloads, command‑and‑control traffic, or data exfiltration have been identified in the available intelligence. Defenders should continue to block the domain at network perimeters and consider adding the IP address 142.250.190.228 to threat‑intel feeds only after corroborating evidence of malicious use, to avoid inadvertent disruption of legitimate Google services. Ongoing monitoring of DNS queries for the domain and any sub‑domains is advised, as is periodic re‑scanning with VirusTotal or comparable multi‑engine services to track changes in detection ratios.