dmca-chrome[.]com

The domain dmca-chrome.com was identified as a high-risk phishing site specializing in brand impersonation. Analysis confirms it mimics Google’s official Chrome Web Store Developer Policy Center, specifically targeting users with fraudulent copyright removal requests. The domain is currently offline but was actively used to harvest credentials from developers and content publishers under the guise of legitimate DMCA procedures. Infrastructure analysis reveals the domain was flagged by 12 of 95 security vendors on VirusTotal, including detections for social engineering tactics. It appears on two security blocklists—PhishDestroy and InversionDNS—and resolves to the IP address 104.21.16.24. The domain was registered on May 19, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with abusive registrations. Additional technical indicators include the use of jQuery CDN, Cloudflare Browser Insights, and a Let’s Encrypt SSL certificate, which collectively suggest an attempt to appear legitimate while concealing malicious intent. The Gridinsoft trust score for this domain is 0/100, reinforcing its classification as a confirmed threat. Current status indicates the domain has been taken offline, likely due to enforcement actions or hosting provider intervention. However, the infrastructure remains a potential risk for re-emergence under a similar or altered guise. Organizations are advised to block the domain and its associated IP (104.21.16.24) at the network perimeter. Security teams should monitor for phishing campaigns leveraging Google’s branding, particularly those involving DMCA or copyright-related lures. End-users should be trained to verify URLs against official Google properties and report suspicious links to their security operations centers. If credentials were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended for affected accounts.