credit[.]starlngs[.]com

The domain credit.starlngs.com was identified as a phishing site engaged in brand impersonation, specifically targeting Google. This type of scam aims to deceive users into believing they are interacting with a legitimate Google service, potentially leading to credential theft or financial fraud. No crypto drainer kit was detected. As of the latest verification, credit.starlngs.com has been taken offline, though prior activity classified it as an elevated-risk threat.

Technical analysis of credit.starlngs.com revealed 12 of 95 VirusTotal security vendors flagged the domain as malicious, including BitDefender, CyRadar, and ESET. The domain was registered through Cosmotown, Inc. on April 22, 2025, and resolved to the IP address 163.61.188.222, hosted under AS153568 NEW DHAKA HARDWARE in the US. It appeared on one security blocklist, PhishDestroy, and had no SSL certificate. The observed page title was 'Welcome | CREDIT STARLNG', and nameservers were dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting.com. Gridinsoft assigned a trust score of 0/100 to the domain.

Users who may have interacted with credit.starlngs.com should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication (2FA) if not already active. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand's support team. To report the phishing domain, submit it to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If financial or crypto transactions were involved, contact the relevant platform or wallet provider to secure accounts.