google-miner[.]com

This domain is flagged as a high-risk brand impersonation site targeting Google. The page title, Google Miner 2025 Official AI Investment Platform, indicates a cryptocurrency-themed scam designed to deceive users into believing it is a legitimate Google-affiliated investment service. The domain was registered on February 21, 2026, through Dynadot LLC, and its infrastructure relies on Cloudflare for hosting and content delivery, including nameservers cecelia.ns.cloudflare.com and merlin.ns.cloudflare.com, and an IP address 172.67.144.193 located in the United States. The SSL certificate is issued by Google Trust Services, which may be an attempt to lend false credibility to the site, as Google Trust Services typically issues certificates for legitimate Google-owned domains, not third-party scam sites. The use of Yandex.Metrika and Cloudflare Browser Insights suggests the operators are tracking visitor behavior, likely to refine their attack or identify high-value targets. The domain returns an HTTP 301 redirect, which may lead users to a different page after initial access, complicating detection by automated scanners. VirusTotal data shows 3 out of 95 security vendors flag this domain as malicious, and it appears on one security blocklist maintained by PhishDestroy. The Gridinsoft trust score of 0 out of 100 further confirms the domain's lack of credibility. It is uncertain whether the site hosts a fully functional phishing page or serves as a redirect to another malicious domain, as the exact content behind the redirect has not been captured. Defenders should add this domain to blocklists immediately, monitor for related subdomains or variations, and educate users about unsolicited investment platforms claiming affiliation with Google. Given the active status and cryptocurrency scam angle, financial institutions and cryptocurrency exchanges should be alerted to potential credential harvesting or wallet-draining campaigns linked to this domain.