szkore[.]com

This domain, szkore.com, is currently under investigation for brand impersonation, specifically targeting Google. Brand impersonation occurs when a malicious or deceptive website mimics a legitimate company’s branding, design, or functionality to trick users into divulging sensitive information, downloading malware, or engaging in fraudulent transactions. In this case, the site displays the page title 'Google,' which is a direct attempt to mislead visitors into believing they are interacting with the official Google platform. Such impersonation can lead to credential theft, financial fraud, or unauthorized access to personal accounts, posing significant risks to unsuspecting users. Analysis of szkore.com’s infrastructure reveals several technical indicators that warrant scrutiny. The domain was created on November 01, 2016, and remains active, which may suggest a long-term operation rather than a short-lived phishing campaign. It is registered through Gname.com Pte. Ltd., a registrar that has been associated with domains involved in impersonation schemes in the past. The site resolves to the IP address 172.67.144.83, which is hosted on a content delivery network (CDN) often used to obscure the true origin of malicious traffic. Notably, the domain’s SSL certificate is issued by Google Trust Services, which could be an attempt to lend an air of legitimacy, though this is not uncommon for impersonation sites leveraging free or misissued certificates. VirusTotal currently reports 0 detections out of 95 security engines, indicating that no major security vendors have flagged the domain as malicious at this time. However, the absence of detections does not guarantee safety, as newer or sophisticated threats may evade initial detection. If you have visited szkore.com or interacted with its content, immediate action is recommended to mitigate potential risks. First, avoid entering any personal information, credentials, or financial details on the site, and do not download any files or click on links. If you have already provided login credentials, change your passwords immediately, particularly for Google-related accounts, and enable multi-factor authentication (MFA) where available. Monitor your accounts for any unauthorized activity, such as unfamiliar logins, transactions, or changes to settings. Additionally, consider running a full scan of your device using updated security software to detect any potential malware or unwanted programs. If you suspect your financial information has been compromised, contact your bank or payment provider to report the incident and request further guidance. Finally, report the domain to relevant authorities or platforms, such as Google’s Safe Browsing program or your local cybersecurity incident response team, to help prevent further abuse.