wal[.]stakingsrewards[.]club

This domain, wal.stakingsrewards.club, was registered on 21 February 2026 and is currently listed as offline. The site presented a page title of “Google”, indicating an attempt to impersonate the Google brand, and was classified as a credential‑phishing operation. DNS resolution points to IP 142.250.194.100, which belongs to AS15169, Google LLC, located in the United States. The SSL certificate observed for the host is identified as “WR2”, but no further certificate details were disclosed. The domain appears on one public blocklist, where it is flagged by PhishDestroy, and it has generated a Gridinsoft trust score of 0 out of 100, reflecting an extremely low reputation.

VirusTotal analysis returned 14 positive detections out of 93 submitted scanners, confirming that multiple security vendors consider the host malicious. The elevated risk rating aligns with the observed indicators. Analysis confirms that the infrastructure leverages legitimate Google‑owned IP space, a common tactic to increase credibility and evade basic network filters. The combination of a brand‑specific page title, credential‑phishing intent, and low trust scores suggests a targeted campaign aimed at harvesting Google account credentials.

However, no additional artifacts such as payload hashes, phishing kit identifiers, or detailed HTTP response codes have been released, leaving the exact delivery mechanism and page content unverified. Defenders should continue to block wal.stakingsrewards.club at the DNS and proxy layers, enforce strict outbound filtering to prevent credential submission to this host, and consider adding the associated IP address 142.250.194.100 to threat‑intel feeds with a note on its abuse in this context. Ongoing monitoring of the domain’s registration status and any re‑appearance on blocklists is recommended, as the operator may reactivate the site or shift to a new domain using similar techniques.