khaledfozan[.]com

khaledfozan.com has been identified as a high-risk site actively impersonating Google. The domain was created on July 29, 2022, and remains operational as of the report date, July 12, 2026. This site has been flagged on two security blocklists and is associated with the IP address 178.63.224.102. Additionally, it is noted for being included in 22 threat intelligence pulses on AlienVault OTX, indicating a significant history of malicious activity tied to this domain. The domain's trust score from Gridinsoft is 0 out of 100, further substantiating its threat level.

The website is built using a combination of technologies including WordPress, MySQL, and PHP, and is optimized for search engines with the Yoast SEO plugin. It operates under an SSL certificate issued by Let's Encrypt, which, while providing a layer of encryption, does not mitigate the phishing risks associated with the domain. Notably, it has been flagged by the security vendors PhishDestroy and BLP-Malware, confirming its malicious intent.

In terms of detection, only 2 out of 95 security vendors on VirusTotal have flagged this domain, highlighting a potential gap in the recognition of this threat across various security infrastructures. Defenders should remain vigilant and consider implementing measures to block access to this domain and educate users about the risks of engaging with sites that impersonate reputable brands like Google. Continuous monitoring for updates and changes in the status of this domain is recommended to ensure a proactive defense against its phishing attempts.