dashboard[.]woodforestbnk[.]com

On 22 July 2026 the domain dashboard.woodforestbnk.com was observed as an offline Google brand‑impersonation site. The domain was registered on 6 August 2025 through NameSilo, LLC and resolves to the IPv4 address 107.173.193.235, which is announced by AS36352 HostPapa and geolocated to the United States. Authoritative name servers listed for the zone are ns5.elitecloudserver.com and ns6.elitecloudserver.com. No TLS certificate is presented for the host, indicating that the site operated without HTTPS.

The only publicly visible page title returned before the takedown was “Welcome to | Wood Forest Financial”, which does not reference the targeted brand but confirms the existence of a landing page under the Wood Forest Financial name. The infrastructure has been flagged by PhishDestroy and appears on a single security blocklist. Independent scanning on VirusTotal reported a single positive detection out of ninety‑five vendors, and the Gridinsoft trust score assigned a rating of zero out of one hundred, reflecting extreme suspicion. The domain is currently offline, preventing further interaction, but the underlying hosting provider (HostPapa) and name server configuration remain active and could be reused for future campaigns.

Defenders should continue to block the IP address 107.173.193.235 at network perimeter devices, add the domain to URL filtering lists, and monitor any new subdomains under the same registrar or name server pair for rapid detection. Additional investigation of the hosting account and any associated WHOIS contact information may reveal further malicious infrastructure. Until the domain is fully remediated, organizations should remain vigilant for attempts to lure users with Google‑related content that might be hosted on similar infrastructure.