land-app5[.]top

Analysis of the domain land-app5.top indicates a targeted brand impersonation campaign against Google. The domain was registered on July 09, 2025 through the registrar 耐思尼克国际集团有限公司 and resolves to the IP address 74.125.200.104, which belongs to AS15169 Google LLC located in Singapore. No SSL certificate is presented, and the site currently returns an offline status, suggesting that it has been taken down or is otherwise inaccessible. The page title observed during scanning was "Google," matching the declared brand target.

VirusTotal reports that six of ninety‑five security vendors flagged the domain as malicious, providing limited but consistent detection across multiple scanning engines. AlienVault OTX lists the domain in two separate threat‑intel pulses, reinforcing its association with malicious activity. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, indicating that defensive communities have identified it as a threat. Only one nameserver is associated with the domain, further simplifying its DNS footprint.

While the available data confirms the presence of brand impersonation and the involvement of reputable detection sources, the exact payload, landing page content, and any credential‑harvesting mechanisms remain unknown due to the offline status and lack of SSL. Defenders should add land-app5.top to network and endpoint blocklists, monitor DNS queries for the IP 74.125.200.104, and ensure that any traffic to the domain is denied. Continued observation of OTX updates and VirusTotal re‑scans is recommended to capture any future changes in the domain's activity or infrastructure.