astr[.]stakingrewards[.]biz
“Google”
astr.stakingrewards.biz — 内容不可用 (HTTP 502). 品牌冒充:Google; 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 13 detections (engine total unavailable) (ADMINUSLabs, ChainPatrol, BitDefender, CRDF, CyRadar); PhishDestroy score 89/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain astr.stakingrewards.biz was registered on February 21, 2026 and is currently taken offline. Technical checks reveal that it presented an SSL certificate identified as WR2 and received a Gridinsoft trust score of 0 out of 100, indicating a lack of confidence in its legitimacy. DNS resolution points to IP address 142.251.42.132, which is assigned to Google LLC (AS15169) and geolocated to India. The use of a Google‑owned IP may suggest abuse of legitimate infrastructure or a spoofed address, but the precise hosting arrangement remains unclear.
The site’s page title was observed as "Google" and the brand target is explicitly listed as Google, aligning with the reported scam type of credential phishing. Detection services flagged the domain on one known blocklist, PhishDestroy, and VirusTotal recorded 13 detections out of 95 security vendors, confirming that multiple scanners recognized malicious behavior. Given the combination of a brand‑impersonating page title, low trust scores, and vendor detections, the domain is classified with an elevated risk level.
Defenders should immediately block the domain at network perimeter, add the associated IP to deny‑list rules, and ensure that any DNS queries for the domain are intercepted. Continuous monitoring for new domains that resolve to the same Google‑owned IP range is advised, as well as periodic re‑scanning of the IP for potential compromise. Further analysis of the SSL certificate details, HTTP response headers, and any redirection behavior would reduce uncertainty, but current evidence already justifies proactive mitigation.
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。