m[.]fyqn9810la0y[.]com

PhishDestroy has identified the domain m.fyqn9810la0y.com as a brand impersonation threat targeting Google. This domain exhibits elevated risk characteristics and was designed to deceive users by mimicking a legitimate Google-branded page. Notably, the page title found was 'ManBetX(万博体育)官网|英超狼队和水晶宫全球赞助伙伴', which is unrelated to Google, suggesting a possible dual-purpose scheme or a compromised landing page.

Technical analysis reveals that the domain is flagged by 15 out of 95 security vendors on VirusTotal, indicating widespread detection. It was registered through GoDaddy.com, LLC on June 21, 2021, and resolves to IP address 172.65.201.65. The SSL certificate is issued by Sectigo Limited / Sectigo Public Server Authentication CA DV R36. The domain currently appears on 2 security blocklists and is flagged by Google Safe Browsing, confirming its malicious nature.

The domain is currently offline, indicating that it has been taken down or suspended following security actions. However, because the domain was registered over a year ago, there is a risk that similar domains may still be active or that the threat actors may register new variants. Users are advised to remain vigilant against any unsolicited communications referencing Google and to verify URLs before entering credentials. If you have interacted with this domain, change your passwords and monitor accounts for suspicious activity.