xlm[.]stakingrewards[.]biz

The domain xlm.stakingrewards.biz is a phishing site that impersonates the Gmail brand, as indicated by its page title "Google" and classification as an email scam type. It poses a threat by attempting to deceive users into providing email account credentials or sensitive information through a fraudulent login interface, potentially leading to account compromise and data theft.

Technical analysis reveals the site was flagged by 15 out of 95 VirusTotal vendors, with detection from ADMINUSLabs, ChainPatrol, BitDefender, CRDF, and CyRadar. The domain is hosted on IP address 64.233.180.104, assigned to AS15169 Google LLC in the United States. It was created on February 21, 2026, uses an SSL certificate identified as WR2, and is listed on one blocklist.

The site is currently offline and carries a high risk level, with GridinSoft trust rating of 0 out of 100 and a domain risk score of 88. Its offline status does not eliminate the threat, as the domain could be reactivated for future phishing campaigns.