8linkbones[.]icu

8linkbones.icu is a phishing domain engaged in brand impersonation, specifically targeting Google. The domain poses a threat by attempting to deceive users into believing it is a legitimate Google service, potentially to harvest credentials or personal information. As of the latest assessment, the site has been taken offline, reducing immediate risk, but it remains flagged by security vendors and blocklists.

Technical indicators for 8linkbones.icu include detection by 2 of 95 VirusTotal vendors, specifically alphaMountain.ai and Forcepoint ThreatSeeker. The domain was registered through Web Commerce Communications Limited on July 04, 2025, and resolves to IP address 142.250.65.164, which is located in the US and associated with AS15169 Google LLC. It appears on 1 security blocklist, PhishDestroy, and has no SSL certificate. The page title observed was 'Google,' and the domain uses nameservers FISH.NS.CLOUDFLARE.COM and HASSLO.NS.CLOUDFLARE.COM. Google Safe Browsing did not flag the domain.

To stay safe from phishing threats like 8linkbones.icu, users should avoid interacting with suspicious links and verify domain authenticity before entering credentials. If credentials were entered on this site, change passwords immediately, enable two-factor authentication on all accounts, and monitor for unauthorized activity. Report the domain to Google Safe Browsing and other security platforms to help block similar threats. Since no drainer kit was identified, no token revocation steps are necessary.