easytrx[.]net

The domain easytrx.net is a phishing site involved in brand impersonation targeting Google. It is classified as an elevated risk scam that attempts to deceive users under the guise of Google services, specifically related to tech support scams. The site has been taken offline, reducing immediate risk to potential victims, but its prior activity warrants caution for anyone encountering the domain or related communications.

easytrx.net was registered on September 5, 2025, through NiceNIC International Group Co., Limited and resolves to the IP address 178.159.43.228 located in the Netherlands (AS211381 Podaon SIA). The domain is secured with an SSL certificate issued by Let's Encrypt / R12. It appears on one security blocklist, PhishDestroy, and is detected by 1 of 95 VirusTotal vendors. The domain uses technologies such as Bootstrap, Nginx, Cloudflare, jQuery, and cdnjs. Despite the low detection rate on VirusTotal and no flagging by Google Safe Browsing, both Gridinsoft and Scamadviser assign a trust score of 1 out of 100, indicating high suspicion.

Users encountering easytrx.net or related phishing attempts should avoid interacting with any content or providing credentials. Because this is a brand impersonation scam targeting Google accounts, victims should immediately change their Google passwords, enable two-factor authentication, and monitor their accounts for unauthorized activity. Reporting the incident to Google and relevant cybersecurity authorities is recommended to aid in blocking and takedown efforts. Since the site is offline, ongoing vigilance is necessary to prevent similar scams from emerging under different domains.