eul[.]portal-hubs[.]sbs

This report details the technical analysis of the domain eul.portal-hubs.sbs. The site presented a page title of "Google" and was identified as an impersonation scam targeting the Google brand. The primary threat posed by this domain is brand impersonation, where users may be deceived into believing they are interacting with a legitimate Google service, potentially leading to credential theft or other fraudulent activity.

Technical evidence confirms the malicious nature of this site. VirusTotal analysis shows the domain was flagged as malicious by 8 out of 95 security vendors, including ChainPatrol, CRDF, Fortinet, G-Data, and Seclookup. The domain was registered through Dynadot LLC on 2025-10-21 and resolves to IP address 142.250.185.164, which is located in the United States and belongs to AS15169 Google LLC. The site lacks an SSL certificate, and its nameservers are brenna.ns.cloudflare.com and hassan.ns.cloudflare.com. The GridinSoft trust rating is 0 out of 100.

The domain is currently offline or down, which limits its immediate threat. Based on the available data, the risk level is considered high due to the combination of brand impersonation, multiple vendor flags, a low trust score, and a very recent creation date.