hr[.]goolge-secure[.]com

hr.goolge-secure.com is a subdomain of goolge-secure.com. PhishDestroy first observed the hostname on Jun 30, 2026. Stored content metadata identifies Microsoft as the apparent target. The captured page title is “Sign in to your Microsoft Account”. Stored page analysis classifies the content as credential phishing. Current evidence score: 100/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, DNS security resolvers, and URLQuery. VirusTotal recorded 14 detections among 91 engines: Certego, Chong Lua Dao, Cluster25, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, Lionic, SOCRadar, URLQuery, VIPRE, Webroot on Aug 1, 2026 at 02:54 UTC. DNS security checks returned 5 blocking results across 14 tested policies: Adguard Default, Adguard Family, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. URLQuery recorded 3 detections; no observation timestamp was retained. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Jun 30, 2026 at 18:45 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:31 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:14 UTC. Registration records for the registrable domain goolge-secure.com list TUCOWS.COM, CO. as the registrar and Apr 30, 2025 as the creation date. At collection time, the hostname resolved to 52.30.103.131 on AS16509 (AMAZON-02 - Amazon.com, Inc., US). The recorded endpoint location is Dublin, IE. DOM analysis on Jun 30, 2026 at 18:20 UTC returned 88/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Sectigo Limited as the certificate issuer with validity through Feb 5, 2027; checked Jun 30, 2026 at 19:00 UTC.

The content indicators and 3 positive source findings support the current Microsoft-themed credential phishing classification.