asd[.]dfabnsgh[.]com

PhishDestroy has identified asd.dfabnsgh.com as a brand impersonation threat specifically targeting Google, with an elevated risk level. The domain is currently offline, having been taken down after its detection. This phishing domain was designed to deceive users into believing they were interacting with a legitimate Google service, potentially capturing sensitive information such as login credentials.

The domain was registered through Dynadot LLC on August 22, 2025, and resolved to IP address 13.229.226.237. It was flagged by 1 out of 95 security vendors on VirusTotal, indicating a low detection rate but sufficient evidence of malicious intent. The domain also appeared on one security blocklist, and its SSL certificate was issued by Let's Encrypt with thumbprint E7. The page title was "Gold Tube- chi tiết ứng dụng," which deviates from the expected Google branding, further confirming the impersonation attempt.

Given that the domain is now offline, the immediate threat has been neutralized. However, users should remain vigilant against similar domains that may attempt to impersonate Google. PhishDestroy recommends avoiding any unsolicited links or emails that request login credentials, and always verifying the URL before entering sensitive information. If any credentials were entered on this domain, they should be changed immediately and accounts monitored for suspicious activity.