googleplaydeutsche[.]com

This domain, googleplaydeutsche.com, is flagged for brand_impersonation targeting Google and Deutsche Bank. Analysis indicates the site presents itself as a legitimate Google Play service but displays the page title 'Deutsche Bank Auto AI,' suggesting an attempt to deceive users into believing it is affiliated with both brands. No drainer kit signatures have been confirmed at this time, though the conflicting branding raises suspicion of credential harvesting or financial fraud. Infrastructure analysis reveals the domain was registered on June 25, 2026, through TUCOWS.COM, CO., and resolves to the IP address 64.7.199.56. VirusTotal reports 3 out of 95 security vendors have flagged the domain as malicious. The SSL certificate is issued by Let's Encrypt, a common tactic to lend false legitimacy. Google Safe Browsing (GSB) status is not explicitly listed, and no additional blocklist data is currently available beyond the VirusTotal detections. The domain remains active as of the latest verification, with no takedown or sinkholing observed. Response actions should include immediate blocklisting at the DNS and network perimeter levels, as well as monitoring for related phishing campaigns leveraging similar infrastructure. The remaining risk is high due to the domain's active status, conflicting branding, and low but present detection rate. Organizations are advised to alert users about this impersonation attempt and verify any unexpected communications purporting to originate from Google or Deutsche Bank.