digitalbyccdbs[.]univer[.]se

This domain, digitalbyccdbs.univer.se, is identified as a high-risk brand impersonation phishing site specifically targeting Google users. The infrastructure is designed to mimic legitimate Google services, tricking users into disclosing login credentials, personal information, or financial details through deceptive login portals or fraudulent notifications. Analysis indicates the domain was constructed to exploit trust in the Google brand, a common tactic in credential harvesting and account takeover campaigns. Infrastructure analysis reveals concrete evidence of malicious intent. The domain was registered on February 21, 2026, an anomalous creation date suggesting potential domain spoofing or typo-squatting. It resolves to IP address 66.33.60.129, hosted on infrastructure belonging to AS16509 (Amazon.com, Inc.) in the United States, with a Let's Encrypt SSL certificate (R13) to lend a false sense of legitimacy. The domain appears on one security blocklist and is flagged by 18 out of 95 security vendors on VirusTotal, with Google Safe Browsing explicitly categorizing it as phishing. The page title, 'Site Disabled,' may indicate recent takedown efforts or temporary concealment of malicious content. Users who visited digitalbyccdbs.univer.se should take immediate action to mitigate potential compromise. Disconnect the device from the network to prevent further data exfiltration and run a full system scan using updated security tools to detect any installed malware or backdoors. Reset passwords for all accounts accessed from the compromised device, prioritizing Google accounts and any linked services. Enable multi-factor authentication where available to add an additional layer of security. Monitor financial statements and account activity for unauthorized transactions or changes. If sensitive information was entered, consider reporting the incident to relevant authorities and credit monitoring services to prevent identity theft.