association-google[.]xyz

This domain, association-google.xyz, is a confirmed tech support scam domain impersonating Google. It was created on November 10, 2025, and was reported as offline as of July 23, 2026. The domain is registered through Web Commerce Communications Limited and resolves to IP address 188.114.97.3, which is hosted by Cloudflare, Inc. in the United States (AS13335). No SSL certificate was detected for this domain.

The page title observed was "BrightLine Electronics," which does not match the Google brand it targets, suggesting the domain may have been used for a tech support scam that misleads visitors into believing they are interacting with Google support or services. Infrastructure analysis reveals the domain uses Cloudflare nameservers (ken.ns.cloudflare.com and marissa.ns.cloudflare.com) and is hosted on Cloudflare's IP range. This domain is flagged by 15 out of 93 security vendors on VirusTotal, indicating broad detection across the security community. It appears on 2 security blocklists and has been blocked by PhishDestroy and CryptoFirewall.

The domain also appears in 2 threat intelligence pulses on AlienVault OTX, confirming its inclusion in documented threat campaigns. The Gridinsoft trust score is 0 out of 100, reflecting high risk. The exact content of the live site has not been preserved, but the combination of brand impersonation, low trust scores, multiple vendor detections, and blocklist inclusion confirms this domain was part of an active tech support scam operation. Defenders should ensure this domain remains on blocklists, monitor for related subdomains or similar registration patterns via Web Commerce Communications, and review any user reports of tech support scams referencing Google or BrightLine Electronics.