w[.]stakingsrewards[.]club

The domain w.stakingsrewards.club was registered on February 21, 2026 and is presently taken offline. DNS resolution points to 142.251.163.105, an address owned by AS15169 Google LLC and geolocated in the United States. Although the IP belongs to legitimate Google infrastructure, threat actors frequently abuse such cloud resources to host credential‑phishing pages. The site’s only observable attribute is a page title of "Google", and the intelligence classifies the activity as credential phishing that impersonates the Google brand. The SSL certificate presented for the host is labeled "WR2", which does not match a recognized certificate authority and is typical of rapidly‑generated certificates used in malicious campaigns.

Gridinsoft assigned the domain a trust score of 0 out of 100, the lowest possible rating, indicating extreme malicious confidence. PhishDestroy has already blocked the domain, and it is listed on one additional security blocklist. VirusTotal analysis reports that 15 of 93 scanned security vendors flagged the domain, providing independent corroboration of its malicious nature. These data points collectively illustrate a deliberate effort to harvest Google account credentials by exploiting a trusted IP range and a superficially legitimate page title.

Defensive actions should include ensuring the domain is denied at perimeter firewalls, updating web‑filtering and DNS‑allow lists, and monitoring for any re‑registration or emergence of similarly named subdomains. Security operations should also treat the hosting IP as a potential indicator of compromise for related phishing infrastructure, extending surveillance to adjacent IP addresses within the same ASN. Because the public payload beyond the title is not available, further forensic collection (e.g., full HTTP response capture) is recommended to enrich attribution and to detect any evolving tactics.