cow[.]stakingreward[.]app

This report details a malicious domain impersonating a legitimate brand. The site, cow.stakingreward.app, presents a page titled "Google" and is designed to impersonate the Gmail service. The threat posed is impersonation, where the site likely attempts to deceive users into believing they are accessing a legitimate Google login or service page to capture credentials or sensitive information. Google Safe Browsing has flagged the site for social engineering, confirming its deceptive intent.

Technical evidence confirms the site's malicious nature. On VirusTotal, 16 out of 95 security vendors detected the domain as malicious, with flags from ADMINUSLabs, ChainPatrol, BitDefender, CRDF, and CyRadar. The domain is registered with Dynadot LLC and was created on 2025-12-27. It resolves to IP address 142.251.45.164, located in the United States and belonging to AS15169 Google LLC. The site has no SSL certificate, operates with nameservers alexa.ns.cloudflare.com and randall.ns.cloudflare.com, and is currently down or offline.

The domain is considered high risk. It has a GridinSoft trust rating of 0 out of 100 and a DOM risk score of 10, the maximum. It is listed on one blocklist. Although currently offline, its recent creation date and high detection rate indicate it was an active threat. Any interaction with this domain should be avoided due to its confirmed impersonation and social engineering risks.