nensengo[.]com

This domain is flagged for elevated-risk brand impersonation targeting Google, specifically mimicking the Google Chrome browser interface to deceive users into disclosing credentials or installing malicious software. Analysis indicates a deliberate attempt to exploit trust in the Google brand, with infrastructure designed to appear legitimate while facilitating unauthorized access or data exfiltration. Infrastructure analysis reveals the domain was registered through Porkbun LLC on February 21, 2026, and resolves to IP address 172.67.192.57, hosted on Cloudflare’s AS13335 network in the United States. Security vendors report 18 out of 95 detections on VirusTotal, and the domain appears on one security blocklist, specifically PhishDestroy. The SSL certificate is issued by Google Trust Services (WE1), a detail that may enhance perceived authenticity. The page title, 'Google Chrome - The Fast & Secure Web Browser Built to be Yours,' further reinforces the impersonation theme, aligning with known tactics used in credential theft campaigns. Mitigation steps for this threat type include immediate blocking of the domain and its associated IP at the network perimeter. Organizations should deploy indicators of compromise (IOCs) such as the domain, IP, and SSL certificate fingerprint into security monitoring systems to detect potential lateral movement or exfiltration attempts. User awareness training should emphasize verifying domain authenticity, particularly for browser-related downloads or login portals, and reporting suspicious URLs to internal security teams. Given the elevated risk, affected entities are advised to audit recent access logs for interactions with this domain and reset credentials for any accounts that may have been exposed.