bitautomarket[.]pro

This domain, bitautomarket.pro, is identified as a brand impersonation threat specifically targeting Google. Analysis indicates the site masquerades as a legitimate Google service under the page title 'Home - BitAutoMarket,' likely designed to deceive users into divulging credentials or downloading malicious payloads. The threat type is classified as elevated due to its direct association with a high-profile brand and confirmed malicious activity. Infrastructure analysis reveals the domain is registered through an anonymized registrar linked to ASN 36352 (CC-172-245-155-8-29) and resolves to the IP address 172.245.155.10. VirusTotal detection metrics show 6 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Google Trust Services, a tactic often employed to lend false legitimacy. Scamadviser and Gridinsoft both assign trust scores of 1/100 and 0/100, respectively, and AlienVault OTX records it in one threat intelligence pulse. As of the latest assessment, bitautomarket.pro has been taken offline, reducing immediate risk to users. However, historical indicators suggest the infrastructure may be repurposed or re-registered under a new domain. Organizations are advised to monitor for residual DNS queries to 172.245.155.10 and review logs for connections to the domain prior to its takedown. Security teams should update blocklists to include the domain and associated IP, and conduct internal investigations for any prior interactions with the site.