postcapitalplc[.]com

This domain, postcapitalplc.com, poses as a Google-affiliated financial service portal to deceive users into submitting login credentials, payment details, or other sensitive information. The site uses a fabricated corporate identity (Post Capital PLC) to lend false legitimacy, targeting individuals searching for Google financial tools, investment platforms, or corporate services. Analysis of the page title and content structure indicates an attempt to mimic Google’s branding, potentially tricking users into believing they are interacting with an official Google property. Infrastructure analysis reveals multiple red flags. The domain was registered on February 21, 2026, through OrangeHost LLC, an uncommon registrar for legitimate corporate entities. It resolves to the IP address 161.97.121.66, hosted in France under AS51167 (Contabo GmbH), a provider frequently abused for phishing operations. Security vendors on VirusTotal flagged the domain as malicious, with 17 out of 95 engines detecting it as a threat. Additionally, the domain appears on one security blocklist and uses a Let’s Encrypt SSL certificate (serial number E7), which, while providing encryption, does not validate the site’s authenticity. Users who visited postcapitalplc.com should assume their credentials or personal data may have been compromised. Immediately reset passwords for any accounts accessed after visiting the site, especially those linked to Google services or financial platforms. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor financial statements and credit reports for suspicious activity, as stolen credentials may be used for fraudulent transactions. Report the domain to local cybersecurity authorities or incident response teams for further investigation. Avoid interacting with any links or attachments from the site, and verify the legitimacy of any financial or corporate portals through official Google channels before entering sensitive information.