gabrielgiraldo[.]com

This domain is flagged for brand impersonation targeting Google with an associated tech support scam classification. Registration occurred on September 09 2025 through Cloudflare Inc with nameservers paul.ns.cloudflare.com and robin.ns.cloudflare.com. The domain remains active as of the report date and resolves to the IPv6 address 2a02:b49:4:8::1 located in NL under AS39572. HTTP status returns a 302 redirect while the certificate is issued by Google Trust Services under the WE1 profile. Detected technologies include AMP HSTS Google Tag Manager Cloudflare and HTTP/3. Gridinsoft assigns a trust score of 0/100 and the domain appears on two security blocklists with explicit blocks from PhishDestroy and ScamSniffer. VirusTotal reports detections from 1 out of 95 vendors.

Infrastructure analysis reveals consistent use of Cloudflare edge services and an IPv6-only endpoint without corresponding A records listed. The observed page title Kostenlose Porno Videos & XXX Filme: Sex Videos Tube | xHamster diverges from the declared Google impersonation target indicating possible content rotation or cloaking behavior. The scam type designation of tech support aligns with the brand target yet the precise landing page content remains unexamined beyond the title string. No additional kit signatures or hosting provider details beyond the listed ASN are available for correlation.

Defenders should treat the combination of low trust scores blocklist presence and redirect behavior as actionable signals for immediate blocking at network and endpoint layers. Monitoring for similar registrations under the same nameservers or certificate authority may surface related infrastructure. Continued observation of HTTP responses and title changes provides further indicators of operational shifts without requiring direct site visitation. Cross-reference with existing blocklist feeds ensures coverage while avoiding reliance on single-vendor verdicts alone.