stakingrewards[.]click

Stakingrewards.click is a brand impersonation phishing domain that specifically targets Gmail users. As of the latest analysis, the domain has been taken offline, but it posed a significant threat by mimicking the Google login interface to steal credentials. The page title was set to "Google," further deceiving visitors into believing they were on a legitimate Google service.

This domain was registered through Dynadot LLC on June 09, 2025, and resolved to IP address 172.217.23.100. It appeared on two security blocklists and was flagged by 7 out of 95 VirusTotal vendors as malicious. The SSL certificate was issued by Google Trust Services, which added an extra layer of false legitimacy. Despite being offline, the domain's indicators highlight the sophistication of the phishing campaign.

Users should remain vigilant and avoid interacting with any emails or links pointing to stakingrewards.click. Even though the domain is currently inactive, similar phishing attempts may emerge. Always verify URLs before entering credentials, enable two-factor authentication on Gmail accounts, and report suspicious domains to security teams or blocklist providers. PhishDestroy recommends monitoring for lookalike domains and educating users about phishing red flags.