accounts[.]google[.]ss-o[.]com

Analysis indicates that the domain accounts.google.ss-o.com was registered on 21 February 2026 and is presently taken offline. The site was identified as a tech‑support impersonation targeting Google users. It resolved to IP address 185.198.234.230, which belongs to the NL‑based AS212477 network operated by RoyaleHosting BV.

The hosting infrastructure is flagged by multiple security services: PhishDestroy listed the domain as blocked, and a single security blocklist also contains it. On VirusTotal, twelve of ninety‑three scanning engines flagged the host as malicious, reinforcing the elevated risk rating. The SSL certificate associated with the domain received an E8 rating, and the Gridinsoft trust score is 0 out of 100, indicating a lack of trustworthiness.

The page title returned by the server is identical to the domain name, providing no additional context. Given the combination of brand impersonation, tech‑support scam classification, low trust scores, and multiple vendor detections, defenders should ensure that the domain and its resolving IP are added to perimeter blocklists, monitor for any resurgence of the domain, and scrutinize traffic to the AS212477 range for similar patterns. Continuous threat‑intel feeds should be consulted for new indicators related to this infrastructure, and any internal alerts referencing Google‑related credential collection should be investigated for potential compromise.