donate-google-com[.]review[.]software-moling[.]com

The domain donate-google-com.review.software-moling.com has been identified as a brand impersonation attack targeting Google. This phishing site poses as a Google login page to steal user credentials. No specific crypto drainer kit was detected, but the fake login page is designed to harvest sensitive information such as email addresses and passwords. The site was created on March 30, 2026, and registered through GoDaddy.com, LLC, adding to its deceptive appearance.

Technical analysis reveals several critical indicators. VirusTotal shows 17 out of 95 security vendors flagging this domain as malicious, and Google Safe Browsing explicitly identifies it as a phishing threat. The domain resolves to IP address 168.119.114.11 and uses a Let's Encrypt SSL certificate (E7), which is common among phishing sites. The page title displayed is "Sign in - Google Accounts," further confirming the impersonation. It appears on one security blocklist, indicating widespread recognition of its malicious intent.

As of the latest check, the domain has been taken offline, likely due to abuse reports or automated takedown actions. However, users who may have visited the site before it was removed should remain vigilant. PhishDestroy recommends changing any passwords entered on this domain immediately and enabling two-factor authentication on Google accounts. Although the immediate threat is mitigated, similar domains may appear, so always verify URLs before entering login credentials.