euler[.]portal-hubs[.]lat

The domain euler.portal-hubs.lat was registered through Dynadot LLC on October 21, 2025. It resolves to the IP address 142.250.186.100, which belongs to AS15169 owned by Google LLC and is geolocated in Germany. The site presents a page title of "Google" and is classified as a brand‑impersonation campaign targeting Google. No SSL certificate is associated with the domain, indicating that any HTTP connection would be unencrypted.

Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of credibility. VirusTotal analysis shows that three of ninety‑five security vendors flagged the domain, confirming that multiple detection engines have identified it as malicious. The domain appears on one public security blocklist and is specifically blocked by the PhishDestroy service. Nameserver records point to brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, both Cloudflare‑managed resolvers, which is consistent with typical fast‑flux or proxy‑based phishing infrastructure.

The current operational status is offline, and the domain has been taken down. While the available data confirms the impersonation intent and malicious hosting, details such as the exact payload, phishing page structure, or victim interaction flow remain unknown because the site is no longer reachable. Defenders should continue to block the domain at perimeter and DNS filters, monitor for any resurgence of the same host or associated IP ranges, and ensure that user education emphasizes verification of legitimate Google URLs, especially given the use of a legitimate Google‑owned IP address to lend credibility.