champhorse[.]live

This domain, champhorse.live, is flagged for high-risk brand impersonation targeting Google. Analysis indicates the site masquerades as a legitimate Google service while displaying a Netflix page title, a common tactic to deceive users into believing they are interacting with a trusted platform. No crypto drainer kit signatures were identified, but the mismatch between the impersonated brand (Google) and the displayed content (Netflix) suggests a broader credential theft or phishing campaign designed to harvest user credentials or sensitive information. Infrastructure analysis reveals the domain was registered through NAMEC-4 (ASN: 22612) and resolves to the IP address 209.74.95.150, hosted on infrastructure belonging to Namecheap, Inc. (AS22612) in the United States. The domain appears on one security blocklist and is flagged by Google Safe Browsing as phishing. VirusTotal reports 17 out of 95 security vendors detecting the domain as malicious. Notably, the domain lacks an SSL certificate, a red flag for modern phishing sites that typically employ encryption to appear legitimate. The creation date of the domain is not provided, but the combination of these indicators points to a deliberately crafted phishing infrastructure. As of the latest assessment, champhorse.live has been taken offline, reducing immediate exposure risk. However, the domain remains a potential threat if reactivated or repurposed. Organizations and users are advised to block the domain and its associated IP (209.74.95.150) at the network level. Monitoring for similar domains registered through the same registrar or resolving to the same IP range is recommended. Users who may have interacted with the domain should reset credentials for any accounts accessed during the exposure window, particularly those associated with Google services.