shatteredexalted[.]shop

This domain is flagged as a high-risk brand impersonation threat targeting Google. Analysis indicates the site was designed to deceive users into entering sensitive credentials through fraudulent login interfaces, a common tactic in credential harvesting campaigns. The domain poses a significant risk due to its association with known phishing infrastructure and its explicit impersonation of a major technology provider. Infrastructure analysis reveals the domain shatteredexalted.shop was registered on June 12, 2026, through Namecheap, Inc. It resolves to the IP address 172.67.164.152 and is currently offline, displaying a 523: Origin is unreachable error. The domain appears on one security blocklist and is flagged by Google Safe Browsing as phishing. VirusTotal detection rates show 18 out of 95 security vendors identifying the domain as malicious. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites due to its free and automated issuance process. To mitigate risks associated with this threat, users should avoid interacting with the domain or any links directing to it. Organizations should update web filtering rules to block access to shatteredexalted.shop and monitor for similar domains registered through the same registrar or resolving to the identified IP address. Security teams are advised to review logs for connections to 172.67.164.152 and investigate any credential submissions tied to this domain. End-users who may have entered credentials on the site should reset passwords immediately and enable multi-factor authentication on all accounts.