nttk[.]live

This domain, nttk.live, is identified as a phishing site impersonating Google to deceive users into disclosing sensitive credentials, such as login details or financial information. Brand impersonation phishing relies on mimicking trusted entities to exploit user trust, often leading to account takeovers, unauthorized transactions, or malware distribution. The site was designed to appear legitimate, potentially using cloned Google login pages or fraudulent authentication prompts to harvest user data. Analysis indicates nttk.live was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. The domain is flagged by 6 out of 95 security vendors on VirusTotal, and it appears on three independent security blocklists. Infrastructure analysis reveals the domain resolved to the IP address 188.114.96.3, which may host additional malicious content. The domain has since been taken offline, though historical DNS records suggest it was active for a limited period. If you visited nttk.live or entered any credentials on the site, immediate action is required. First, revoke access to any accounts linked to the information provided, particularly Google-related services. Enable multi-factor authentication (MFA) on all critical accounts to mitigate unauthorized access. Monitor financial statements and account activity for signs of compromise, such as unrecognized transactions or password reset attempts. If malware exposure is suspected, conduct a full system scan using updated security tools. Report the incident to relevant fraud teams, such as Google’s abuse reporting channels, to assist in broader mitigation efforts.