us[.]google-reviewcards[.]com

This domain, us.google-reviewcards.com, was registered through IONOS SE on 23 March 2026 and currently resolves to IP 84.32.84.31, which is associated with a Hostinger CDN node in Lithuania. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com. HTTP requests receive a 301 redirect, and the site presents an SSL certificate issued by Let’s Encrypt (R12) with HSTS enabled, indicating use of Cloudflare services. The page title returned is “Google Review Card USA | NFC Tap,” suggesting a claim of a Google‑related NFC product. Intelligence classifies the infrastructure as a brand‑impersonation campaign targeting Google and associates it with a tech‑support scam. VirusTotal analysis shows a single detection out of ninety‑four scanners, and the domain appears on one public blocklist, where it has already been listed by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The domain remains active as of 12 July 2026. While the exact content beyond the title has not been publicly disclosed, the combination of brand misuse, low trust score, and blocklist presence indicates a high‑risk threat. Defenders should block the domain at network and DNS layers, monitor for related C2 patterns, and update detection rules to include the observed nameservers and IP address. Ongoing observation is advised to detect any future payload delivery or credential‑harvesting activity.