thq[.]stakingsreward[.]org

This domain, thq.stakingsreward.org, is flagged for brand impersonation phishing targeting Gmail users. The site mimics the Google login interface, presenting a page titled 'Google' to deceive visitors into entering credentials. Such impersonation attacks are designed to harvest login details, which can lead to unauthorized account access, data theft, or further exploitation in targeted campaigns. The domain’s infrastructure and content are engineered to closely resemble legitimate Google services, increasing the likelihood of successful deception among unsuspecting users.

Analysis indicates the domain was registered on December 27, 2025, through Dynadot LLC, a registrar frequently utilized for malicious activities. It resolves to the IP address 74.125.68.99, located in Singapore under AS15169 (Google LLC), though this IP association does not imply legitimacy. The domain lacks an SSL certificate, a common red flag for phishing sites. VirusTotal reports 13 out of 95 security vendors flagging the domain as malicious, and it appears on one security blocklist. The domain is currently offline, but its infrastructure remains a potential threat if reactivated.

Users who visited thq.stakingsreward.org should assume their credentials may have been compromised. Immediate steps include changing their Gmail password and enabling multi-factor authentication (MFA) if not already active. Review account activity for unauthorized logins or suspicious actions, such as sent emails, password changes, or linked devices. If financial or sensitive data was entered, monitor associated accounts for fraudulent activity. Organizations should update internal blocklists to prevent access to this domain and conduct awareness training to educate users on recognizing brand impersonation tactics.