white-whalememe[.]com

Analysis as of July 23 2026 indicates that the domain white-whalememe.com was registered on 11 January 2026 through Realtime Register B.V. The site presents the page title “Google”, aligning with the listed brand target of Google and the declared scam type of credential phishing. The domain resolves to IP address 142.250.184.196, which belongs to AS15169 Google LLC and is geolocated to the United States. Despite the IP belonging to Google’s infrastructure, the domain is unrelated to the legitimate organization; it has been taken offline and is currently listed as offline in the intelligence feed. VirusTotal records show that 15 of 93 scanning engines flagged the domain, indicating a moderate detection rate.

The domain is blocked by the PhishDestroy platform and appears on one external security blocklist. The SSL certificate presented is identified as “WE2”, but no further validation details are available. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. The site has been classified as credential phishing, specifically impersonating Google, but the exact content of the landing page has not been captured in the available data.

Uncertainty remains regarding the full phishing kit employed, any additional command‑and‑control infrastructure, and whether the IP address was spoofed or leveraged through compromised Google resources. Defenders should continue to block the domain at network perimeter, add the associated IP address to deny lists, and monitor for any resurgence of the domain or similar variants. Monitoring of VirusTotal, PhishDestroy, and other blocklist feeds for re‑registration attempts is recommended. Organizations should educate users about unsolicited login prompts referencing Google and enforce multi‑factor authentication to mitigate credential theft.