identity-google[.]info

This domain, identity-google.info, operates as a fraudulent Google login portal designed to harvest user credentials. Analysis of the page title, "Sign in - Google Accounts," confirms it replicates the legitimate Google authentication interface, increasing the likelihood of successful phishing attempts. The site targets individuals by exploiting trust in the Google brand, potentially leading to unauthorized account access, data theft, or further malicious activity such as financial fraud or identity compromise. Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain was registered on May 31, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with suspicious registrations. VirusTotal reports 10 out of 95 security vendors flagging the domain as malicious, while Google Safe Browsing explicitly categorizes it as phishing. The site resolves to IP address 188.114.96.3, hosted on Cloudflare infrastructure (AS13335), and currently appears on one security blocklist. Notably, the domain lacks an SSL certificate, which is atypical for legitimate login portals and further undermines its credibility. Users who have visited identity-google.info or entered credentials on the site should immediately take corrective action. Change passwords for any accounts accessed from the same device or network, particularly Google-related services. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions, and report any anomalies to the respective service providers. If financial or personal data was exposed, consider placing a fraud alert with credit bureaus and reviewing recent account statements for irregularities.