gmx[.]stakingsrewards[.]club

This domain, gmx.stakingsrewards.club, was identified as a credential phishing site impersonating Google. The domain was created on February 21, 2026, and has a Gridinsoft trust score of 0/100, indicating a highly untrustworthy status. Analysis reveals that the domain resolves to an IP address (142.250.80.36) located in the United States and is part of the AS15169 Google LLC network. The SSL certificate used by the domain is marked as WR2, which suggests it may be a wildcard or self-signed certificate, often associated with malicious activities.

The domain has been flagged by 15 out of 93 security vendors on VirusTotal, indicating a significant level of suspicion among the security community. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy, further validating its malicious intent. The page title found on the domain is 'Google', which is consistent with the brand impersonation scam type. The current status of the domain is offline, suggesting it may have been taken down by authorities or the hosting provider.

Despite the domain being offline, defenders should remain vigilant as the infrastructure may be reused or the threat actors may attempt to register a similar domain. It is recommended to monitor for any reactivation and to block access to this domain in network security configurations. Additionally, users should be educated on the risks of credential phishing and how to identify and report such threats.