canton-tge[.]com

This domain is flagged as an elevated-risk brand impersonation threat targeting Google. Analysis indicates the infrastructure is designed to deceive users into believing they are interacting with legitimate Google services, potentially leading to credential theft or unauthorized account access. The domain exhibits multiple technical indicators consistent with malicious activity, including a low trust score and inclusion on security blocklists. Infrastructure analysis reveals the domain resolves to IP address 142.251.40.174 and was registered through OwnRegistrar, Inc. on November 11, 2025. Security vendors on VirusTotal flagged the domain as malicious, with 3 out of 95 detections. The domain appears on two security blocklists, and its Gridinsoft trust score is 0/100. The page title, 'canton,' does not align with Google's branding conventions, further suggesting fraudulent intent. The domain is currently offline, but its prior activity remains a concern. Mitigation steps specific to brand impersonation threats include blocking the domain and its associated IP at the network perimeter. Organizations should monitor for any attempts to access this domain internally and conduct user awareness training to recognize impersonation tactics. If credentials were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended. Security teams should also review logs for connections to 142.251.40.174 or related domains registered through OwnRegistrar, Inc. for additional indicators of compromise.