cupsey-register[.]com

PhishDestroy has identified cupsey-register.com as a high-risk brand impersonation threat targeting Gmail users. This domain was specifically designed to deceive visitors into believing they are interacting with Google's legitimate login portal, as evidenced by its page title of 'Google'. The site employs classic phishing tactics to harvest credentials, potentially leading to account compromise and data theft.

Technical analysis reveals several concerning indicators. The domain was registered on February 21, 2026, through REALTIME REGISTER B.V. and resolves to IP address 142.251.141.132. Alarmingly, 10 out of 95 security vendors on VirusTotal flag this domain as malicious, and it appears on four security blocklists. The domain lacks an SSL certificate, further undermining its legitimacy. Additionally, AlienVault OTX has recorded this domain in one threat intelligence pulse, confirming its association with malicious activity. Fortunately, the domain is currently offline, which limits immediate risk, but users should remain vigilant.

To protect against such impersonation attacks, users should always verify URLs before entering credentials. For Gmail specifically, ensure the URL begins with 'https://accounts.google.com' and check for a valid SSL certificate. Avoid clicking links in unsolicited emails or messages; instead, manually type the known website address into your browser. If you suspect you have interacted with a phishing site, immediately change your password and enable two-factor authentication on your account. PhishDestroy recommends reporting any suspicious domains to security teams and running a full system scan for potential malware.