eth[.]portal-hubs[.]lat

This report analyzes the domain eth.portal-hubs.lat, which is an impersonation scam targeting the Gmail brand. The site’s page title displayed “Google,” and the scam type is identified as impersonation. The threat posed is that the site attempts to deceive users into believing they are accessing a legitimate Google or Gmail service, likely to capture login credentials or other sensitive information through a fraudulent interface.

Technical evidence confirms the site is malicious. VirusTotal detected the domain as suspicious by 4 out of 95 vendors. The domain was created on 2025-10-21 through registrar Dynadot LLC. It resolves to IP address 2607:f8b0:4004:c07::93, located in the United States and hosted on AS15169 Google LLC. The site has no SSL certificate. It was flagged by ChainPatrol, G-Data, SOCRadar, and Sophos, and appears on 1 blocklist. The DOM risk score is 10, and GridinSoft trust rating is 0/100.

The domain is currently offline or down. Based on the low trust rating, high DOM risk score, and multiple security vendor flags, the risk level is high. Users should avoid any interaction with this domain as it is confirmed malicious and designed for credential theft.