allinonecashback[.]world[.]americanbullies[.]store

The domain allinonecashback.world.americanbullies.store is a confirmed phishing site engaged in brand impersonation, specifically targeting Google as part of a tech-support scam. This site was designed to deceive users into believing they were interacting with a legitimate cashback service, while instead harvesting credentials or personal information. No crypto drainer kit was identified in this campaign. The domain is currently taken offline, but it previously posed an elevated risk to visitors.

Technical indicators confirm the malicious nature of allinonecashback.world.americanbullies.store. As of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including SOCRadar and Sophos. The domain was registered through HOSTINGER operations, UAB on June 08, 2025, and resolved to the IP address 198.251.89.220, hosted by FranTech Solutions in the US. It appeared on one security blocklist, PhishDestroy, and had a Gridinsoft trust score of 0/100. The SSL certificate was issued by R10, and the observed page title was 'All In One Cashback - Home'. Google Safe Browsing did not flag the domain at the time of assessment.

Users who may have interacted with allinonecashback.world.americanbullies.store should immediately change any passwords entered on the site, particularly for Google or other sensitive accounts, and enable two-factor authentication where available. Monitor financial accounts and credit reports for signs of fraud. Report the phishing domain to Google Safe Browsing, the registrar (HOSTINGER operations, UAB), and platforms like PhishTank or the Anti-Phishing Working Group to aid in takedown efforts.