com-careportal[.]com

This domain, com-careportal.com, is flagged for brand impersonation targeting Google. Analysis indicates the site mimics Google’s branding, as evidenced by its page title labeled 'Google,' suggesting an intent to deceive users into believing they are interacting with legitimate Google services. No specific drainer kit signatures were identified, but the domain’s structure and content align with credential harvesting or phishing campaigns. Infrastructure analysis reveals the domain was registered on May 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 104.251.180.224 and currently holds a Let’s Encrypt SSL certificate (YR1). Detection metrics show 2 out of 95 security vendors on VirusTotal flag the domain as malicious, while it appears on 3 independent security blocklists. Google Safe Browsing (GSB) status was not explicitly provided, but the domain’s offline status suggests prior detection and mitigation efforts. As of the latest assessment, com-careportal.com has been taken offline, likely due to enforcement actions by hosting providers or registrars. However, residual risk persists due to the domain’s recent creation and prior malicious activity. Users are advised to verify domain authenticity before interacting with any Google-branded services and to monitor for similar impersonation attempts. Organizations should update blocklists to include this domain and its associated IP to prevent future exposure.