agustinmartel[.]com

The domain agustinmartel.com is identified as a brand impersonation threat targeting Google. Analysis confirms the site was designed to mimic Google’s branding, likely to deceive users into disclosing credentials or sensitive information. The domain is currently offline, but prior activity aligns with phishing campaigns aimed at harvesting login data or facilitating fraudulent transactions under the guise of a trusted service provider. Technical indicators reveal the domain was flagged by 5 of 95 security vendors on VirusTotal, registered through REGISTER S.P.A. on October 19, 2025, and resolved to the IP address 147.93.88.211. Infrastructure analysis detected WordPress, MySQL, PHP, LiteSpeed, and jQuery, alongside Google Analytics and HTTP/3, suggesting a structured phishing framework. The domain appears on one security blocklist, holds a Gridinsoft trust score of 0/100, and used a Let’s Encrypt SSL certificate, a common tactic to appear legitimate. The page title 'AGM' may have been an attempt to abbreviate or misrepresent Google’s services. Current status indicates the domain has been taken offline, but residual risk remains due to its recent activity and technical setup. Organizations and users are advised to block the domain and its associated IP (147.93.88.211) at the network level. Security teams should monitor for similar impersonation attempts using the registrar (REGISTER S.P.A.) or hosting patterns (Hostinger infrastructure). End-users should verify domain authenticity before entering credentials and report suspicious URLs to threat intelligence platforms for further analysis.