iportalcontactus[.]com

PhishDestroy first observed iportalcontactus.com on May 21, 2026. Stored content metadata identifies Google as the apparent target. Stored page analysis classifies the content as brand impersonation. Current evidence score: 100/100 (critical).

Positive findings are stored from 6 sources: VirusTotal, Google Safe Browsing, Spamhaus DBL, DNS security resolvers, Cloudflare Radar, and URLScan. VirusTotal stored 24 positive engine results: ADMINUSLabs, alphaMountain.ai, BitDefender, Certego, CRDF, Ermes, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Google Safebrowsing, Gridinsoft, LevelBlue, Lionic, Mimecast, Netcraft, SOCRadar, Sophos, Webroot; the total engine count is unavailable or inconsistent on May 23, 2026 at 14:04 UTC. Google Safe Browsing flagged the domain: Social Engineering on May 21, 2026 at 13:27 UTC. Spamhaus DBL: DBL_PHISH on Jul 13, 2026 at 14:35 UTC. DNS security checks returned 6 blocking results across 14 tested policies: Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware, Quad9 Secure; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories phishing and security threats; its verdict timestamp was not retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Barclays and assigned phishing as its category on Jul 29, 2026 at 03:05 UTC. Non-positive and contextual checks: ScamAdviser assigned a trust score of 1/100 (Very Likely Unsafe); no observation timestamp was retained. The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 14:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. PhishStats returned no feed match on May 21, 2026 at 13:27 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:17 UTC; content was unavailable. Registration records for the domain list OwnRegistrar, Inc. as the registrar and May 19, 2026 as the creation date. Registration preceded first observation by 2 days. At collection time, the hostname resolved to 31.7.61.48 on AS51852 (Private Layer INC). The recorded endpoint location is Zurich, CH. The stored server header is Apache/2.4.52 (Ubuntu). The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Aug 17, 2026; checked May 21, 2026 at 17:00 UTC.

The content indicators and 6 positive source findings support the current Google-themed brand impersonation classification.