t[.]stakingsrewards[.]club

Analysis of t.stakingsrewards.club confirms its classification as a credential phishing domain targeting Google users. The domain, created on February 21, 2026, was flagged by 15 of 93 security vendors on VirusTotal, indicating elevated detection consensus. It appears on one security blocklist (PhishDestroy) and has been taken offline as of the report date. Infrastructure analysis reveals the domain resolved to IP 172.217.165.132, hosted under AS15169 (Google LLC) in the US, though this does not imply endorsement or legitimacy.

The SSL certificate was issued under the identifier 'WR2', which lacks transparency and may be associated with low-trust issuers. The page title 'Google' and the scam type 'Credential Phishing' explicitly link the domain to brand impersonation of Google. Gridinsoft assigned a trust score of 0/100, reinforcing its malicious classification. No evidence of a phishing kit or additional page content is available, as the site is currently offline.

Defenders should treat this domain as a confirmed threat vector for credential theft, particularly targeting users expecting Google services. Network-level blocks are recommended for any residual DNS queries or attempts to re-establish connectivity. Further monitoring is advised to track potential re-emergence under the same or similar infrastructure.