app[.]piasmafoundation[.]xyz

The domain app.piasmafoundation.xyz was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IP address 142.250.185.132, which belongs to AS15169 Google LLC and is geolocated in the United States. The page title returned by the server is "Google," matching the declared brand target of Google. The SSL certificate presented is identified as WE2, but no further certificate details are provided.

Infrastructure analysis shows the domain is listed on a single security blocklist and is explicitly blocked by PhishDestroy. Independent scanning on VirusTotal recorded a single positive detection out of 93 participating security vendors, indicating at least one vendor flagged the domain as malicious. The Gridinsoft trust score is 0 out of 100, reflecting an extremely low confidence rating. The reported scam type is a tech support scam, suggesting the site was intended to lure victims into fraudulent support interactions.

While the domain is offline, its prior association with Google branding and the low trust score warrant continued monitoring. Defenders should ensure that any residual DNS entries for 142.250.185.132 are blocked at the network perimeter, add app.piasmafoundation.xyz to local blocklists, and watch for any re‑use of the same registrar or hosting infrastructure. Because the site is no longer active, no further content analysis is possible, and the exact phishing kit or payload remains unknown. Ongoing vigilance is recommended to detect potential re‑deployment of the same malicious infrastructure.