sca[.]stakingrewards[.]biz

Analysis of sca.stakingrewards.biz indicates that the domain was registered on September 16, 2025 through Dynadot LLC and is currently taken offline. The site presented a page title of "Google" and was identified as impersonating the Google brand, classifying the activity as credential phishing. DNS resolution points to IP address 172.217.18.4, which belongs to AS15169 owned by Google LLC and is located in the United States. The SSL certificate in use is identified as WE2, suggesting that TLS was enabled at the time of observation.

The domain appears on two security blocklists, specifically PhishDestroy and ScamSniffer, confirming that multiple defensive feeds have flagged the infrastructure. VirusTotal analysis shows that fifteen of ninety‑five security vendors flagged the domain, providing additional corroboration of malicious intent. The risk level has been assessed as elevated, and the overall status is recorded as offline.

While the exact page content has not been captured, the combination of brand impersonation, credential‑phishing classification, and the presence on reputable blocklists indicates a high likelihood of malicious use. Defenders should ensure that the domain is blocked at perimeter firewalls and DNS filtering solutions, add the associated IP address to blocklists, and monitor for any resurgence of activity. Continuous re‑scanning of the domain and its IP should be performed, and any related indicators of compromise observed in network traffic should be investigated further.