aubblimited[.]org

The domain aubblimited.org has been identified as a brand impersonation threat specifically targeting Google. This phishing domain is currently offline, but its recent activity posed a significant risk to users who may have encountered fraudulent Google-branded login pages or credential harvesting forms. The site was taken down following security interventions, but the underlying infrastructure remains a concern for future campaigns.

Technical analysis reveals that aubblimited.org was registered through Global Domain Group LLC on May 19, 2025, and resolved to the IP address 198.251.89.220. The domain is flagged by 9 out of 95 security vendors on VirusTotal, indicating moderate detection coverage, and appears on one security blocklist. AlienVault OTX includes this domain in a threat intelligence pulse, and the SSL certificate was issued by Let's Encrypt (R12), which is commonly abused by malicious actors. The page title was observed as "AUB || Home," which does not match the impersonated brand, suggesting a possible redirect or cloaking mechanism.

Given the elevated risk level and confirmed brand impersonation of Google, users who may have interacted with aubblimited.org should change their Google account passwords immediately and enable two-factor authentication. PhishDestroy recommends verifying any suspicious URLs through its platform before entering credentials. Although the domain is currently offline, similar threats may emerge from the same registrar or IP range, so ongoing vigilance is advised. Security teams should consider blocking the IP 198.251.89.220 and monitoring for domains registered via Global Domain Group LLC with similar patterns.