com-dskjadnsakpikiasuu[.]com

This domain, com-dskjadnsakpikiasuu.com, is a confirmed credential-theft phishing site designed to impersonate Google login portals. Analysis indicates the site presents fraudulent authentication interfaces to harvest user credentials, session tokens, and multi-factor authentication codes. The infrastructure is engineered to mimic legitimate Google services, including the use of Google Trust Services SSL certificates (WE1) to lend false credibility to the phishing attempt. The domain's page title, which matches the domain name itself, further suggests a lack of effort to disguise the fraudulent nature of the site, potentially targeting users who may overlook the URL due to urgency or distraction tactics commonly employed in phishing campaigns.

Technical evidence confirms the malicious nature of this domain. VirusTotal reports 11 out of 95 security vendors flagging com-dskjadnsakpikiasuu.com as malicious, with detections spanning phishing, brand impersonation, and credential theft categories. The domain was registered on December 27, 2025, through GoDaddy.com, LLC, and resolves to the IPv6 address 2606:4700:3033::6815:379f, hosted on Cloudflare's network (AS13335). Infrastructure analysis reveals the domain appears on three independent security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate, while issued by a legitimate provider, does not mitigate the risk, as phishing sites frequently abuse trusted certificates to bypass initial security checks.

Users who visited com-dskjadnsakpikiasuu.com should assume their credentials or session data may have been compromised. Immediate actions include revoking any active sessions associated with Google accounts, resetting passwords using a secure device, and enabling multi-factor authentication if not already active. System-level scans for malware or unauthorized extensions are recommended, as phishing sites may deploy additional payloads. Network administrators should block the domain and associated IP address at the perimeter to prevent further access. Monitoring for unusual account activity, such as unauthorized logins or changes to security settings, is critical for the next 30 days.