resourcedex[.]site

resourcedex.site was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The authoritative nameservers nsc.go54.com and nsd.go54.com resolve the domain to the IPv4 address 131.153.147.98, which is announced by AS19437 (SECURED SERVERS LLC) and geolocated to the United States. No TLS certificate is presented, indicating the site was served only over HTTP. The page title returned from the HTTP response is "Google", matching the declared brand target and confirming a Google brand impersonation attempt.

Gridinsoft assigns a trust score of 0 out of 100, and five independent security blocklists have already listed the domain. The domain is also flagged by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura as malicious. VirusTotal analysis shows that 2 of 93 scanning engines flagged the domain, reinforcing the suspicion of abuse. As of the report date, the domain is reported offline, suggesting that the infringing content has been removed or the hosting has been taken down.

However, the combination of a freshly created domain, lack of encryption, low trust rating, and multiple blocklist entries indicates a high likelihood that the site was employed for credential harvesting or other Google‑related social engineering. Current evidence does not disclose the exact payload, phishing kit, or victim interaction flow, leaving the operational details uncertain. Defenders should continue to block traffic to 131.153.147.98 and to resourcedex.site at perimeter and endpoint layers, monitor for any re‑appearance of the domain or related infrastructure, and incorporate the domain’s identifiers into threat‑intel feeds. Ongoing observation of the registrar and nameserver configuration is recommended in case the domain is re‑registered or the hosting environment changes.