deflllacma[.]com

This report details the threats associated with the domain deflllacma.com. The site's page title is "Google" and it impersonates the brand "gmail," indicating a phishing scam designed to deceive users into believing they are accessing a legitimate Google or Gmail login page. The primary threat is credential theft, where victims may unknowingly submit their email passwords and personal information to malicious actors.

Technical evidence confirms the site's malicious nature. VirusTotal flagged the domain with 4 detections out of 95 security vendors. The domain was created on 2025-07-23, registered through Dynadot LLC, and hosted on IP address 142.251.163.104, which is associated with AS15169 Google LLC in the United States. No SSL certificate was detected. The domain is flagged by multiple threat intelligence sources including ChainPatrol, alphaMountain.ai, CRDF, and Gridinsoft, and appears on one blocklist. GridinSoft trust rating is 0 out of 100.

The domain is currently marked as DOWN and OFFLINE, indicating the site is not accessible at this time. The overall DOM risk score is 10 out of 100, categorizing it as a low-risk threat based on the provided data. Despite being offline, the domain remains a potential threat for future reactivation or similar impersonation attempts.