portalbridge[.]cc

This domain, portalbridge.cc, is flagged as a confirmed crypto scam impersonating Google, based on infrastructure analysis and threat intelligence available as of July 24, 2026. The domain was registered on August 2, 2025, through Dynadot LLC and resolves to the IP address 142.250.186.164, which is associated with AS15169 (Google LLC) in the United States. Despite the IP's legitimate hosting context, the domain itself exhibits multiple indicators of malicious activity. The page title 'Google' directly aligns with the identified brand impersonation, and the domain is classified as a crypto scam in available threat feeds. Infrastructure analysis reveals the domain is hosted behind Cloudflare nameservers (chloe.ns.cloudflare.com and quinton.ns.cloudflare.com), a common tactic to obscure origin servers and evade detection.

No SSL certificate was present at the time of assessment, increasing the likelihood of interception or man-in-the-middle attacks. The domain appears on at least one security blocklist and is blocked by PhishDestroy, a dedicated anti-phishing service. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. While VirusTotal data indicates one security vendor flagged the domain, the absence of broader scanning results limits definitive conclusions about its detection rate across all engines.

Defenders should treat this domain as high-risk and prioritize blocking it at the DNS and network levels. The use of Cloudflare nameservers and the absence of SSL suggest the infrastructure was configured for short-term malicious campaigns. Given its offline status as of the report date, monitoring for re-activation or similar domains registered through Dynadot or leveraging the same IP range is recommended. No concrete evidence links this domain to a specific phishing kit or additional payloads, but the crypto scam classification aligns with common abuse of brand impersonation for fraudulent financial schemes.