app[.]intlyksoffsglobal[.]online

The domain app.intlyksoffsglobal.online is assessed as having an elevated risk level due to its involvement in brand impersonation, specifically targeting Google. This type of threat is designed to deceive users into believing they are interacting with a legitimate Google service, potentially leading to the theft of sensitive information.

Analysis indicates that app.intlyksoffsglobal.online was created on October 24, 2025. The domain is currently offline and blocked by PhishDestroy. It resolves to the IP address 198.251.83.106 and is registered through Porkbun LLC. The site uses technologies such as PHP, Bootstrap, LiteSpeed, SweetAlert2, SweetAlert, OWL Carousel, and jQuery, and operates over HTTP/3. The domain has been flagged by 4 out of 95 security vendors on VirusTotal and appears on one security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, indicating a highly untrustworthy site. The SSL certificate is issued by Let's Encrypt, which is a common choice for phishing sites due to its ease of acquisition.

To mitigate the risks associated with brand impersonation, users should verify the URL of any Google service they are accessing. Organizations should educate their employees on the signs of phishing and brand impersonation, including checking the domain name and SSL certificate. Additionally, implementing multi-factor authentication (MFA) can significantly reduce the likelihood of unauthorized access even if credentials are compromised. Network administrators should consider blocking the IP address 198.251.83.106 and monitoring for any similar domains or IP addresses that may be used in future attacks.