fractionai[.]events

The domain fractionai.events is currently flagged as a high-risk brand impersonation threat targeting Google. Analysis indicates the domain is active and unresolved as of July 12, 2026. The domain resolves to IP address 142.250.176.196 and is registered through Cloudflare, Inc. The page title is set to 'Google', and the SSL certificate is issued by Google Trust Services, furthering the impersonation attempt. Infrastructure analysis reveals the use of Google Web Server, HSTS, and HTTP/3 technologies. The domain appears on two security blocklists, specifically PhishDestroy and BLP-Malware. VirusTotal data shows 3 out of 95 security vendors flagging this domain as malicious. AlienVault OTX indicates the domain has been observed in 23 threat intelligence pulses, suggesting widespread recognition among security researchers. The Gridinsoft trust score is 0 out of 100, indicating no trustworthiness. The exact content of the webpage has not been analyzed, but the page title and brand target confirm the impersonation of Google. The registration details and hosting infrastructure are consistent with known phishing campaigns, though the specific phishing kit or method used remains uncertain. Defenders should treat this domain as an active threat. Immediate actions include blocking the domain at the network level, updating email security filters to flag any correspondence referencing fractionai.events, and monitoring for related subdomains or variations. Users who may have interacted with the domain should be advised to reset credentials and enable multi-factor authentication. The domain's presence on multiple blocklists and threat intelligence pulses supports a coordinated response. Continuous monitoring is recommended as the domain may evolve or redirect to additional malicious infrastructure.