google-site-verificationpmsfopyknxoo4rkycc21ssavapzywdcbjc1fi3[.]com

The domain google-site-verificationpmsfopyknxoo4rkycc21ssavapzywdcbjc1fi3.com was registered on October 10, 2025 through IONOS SE and resolves to the IP address 74.208.236.32, which is hosted by AS8560 IONOS SE in the United States. The site is currently offline, but historical scans show that four of ninety‑five VirusTotal security vendors flagged the domain as malicious, indicating some level of confidence in its abusive nature. The page title returned by the web server matches the full domain name, and the domain is listed on a single external security blocklist. No SSL certificate was observed, leaving the connection unencrypted and further reinforcing the lack of legitimate service.

The domain’s DNS configuration uses four name servers (ns1026.ui-dns.org, ns1055.ui-dns.de, ns1104.ui-dns.biz, ns1119.ui-dns.com), a pattern often seen in disposable or rapidly re‑hosted malicious infrastructure. Gridinsoft assigned a trust score of zero out of one hundred, and the site has been blocked by the PhishDestroy defensive feed, confirming that at least one third‑party provider has taken action against it. The threat classification is a brand‑impersonation campaign targeting Google, coupled with a tech‑support scam motif, although the exact payload or victim‑interaction flow has not been disclosed.

Defenders should continue to block the domain and its associated IP address in perimeter defenses, add the observed name servers to watchlists for rapid‑change domains, and monitor for any re‑use of the IP range by new malicious registrations. Because the site is offline, live content analysis is not possible, and the absence of HTTPS prevents further certificate‑based reputation checks. Ongoing observation of detection vendor updates, blocklist changes, and any re‑appearance of the domain or related infrastructure will be required to maintain situational awareness.