etvaultb[.]com

This domain, etvaultb.com, is flagged as a brand impersonation threat specifically targeting Google. Although its page title references mobile banking and loans, the domain's registration attributes and security vendor flags indicate it was crafted to deceive users into believing they are interacting with a legitimate Google service. The elevated risk level suggests the domain may have been used to harvest credentials or redirect visitors to malicious pages, posing a direct threat to user privacy and account security.

Technical analysis reveals several concrete indicators. VirusTotal reports 3 out of 95 security vendors flagging this domain as malicious, confirming community-based detection. The domain was registered on April 16, 2025, through Cosmotown, Inc., and resolves to IP address 198.12.66.123. It appears on exactly one security blocklist, indicating targeted but not widespread recognition. Gridinsoft assigns a trust score of 0/100, while Scamadviser rates it at 41/100, both signaling high risk. The domain is now offline and has been blocked by PhishDestroy, a specialized anti-phishing service.

Users who visited etvaultb.com should immediately change passwords for any accounts potentially entered on the site, especially Google credentials. Enable two-factor authentication on all sensitive accounts and monitor for unauthorized activity. Run a full security scan with updated antivirus software. Report the incident to Google's phishing reporting system and consider placing a fraud alert on financial accounts if any personal or payment information was submitted.