web[.]dimovo[.]com

This domain is flagged for elevated risk due to brand impersonation targeting Google, a technique commonly used to deceive users into disclosing credentials or sensitive information under false pretenses. Analysis indicates the site mimics legitimate Google services, potentially harvesting login details or distributing malicious payloads through social engineering tactics. The threat type aligns with known phishing campaigns leveraging trusted brand identities to bypass user vigilance. Infrastructure analysis reveals the domain web.dimovo.com was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with suspicious domains. It resolves to the IP address 172.67.130.128, which has been linked to other low-reputation hosting environments. Detection metrics show 1 out of 95 security vendors on VirusTotal flagged the domain as malicious, while Gridinsoft assigned a trust score of 0/100. The domain appears on at least one security blocklist and was taken offline following intervention by a threat mitigation entity. The page title 'DIMOVO' does not correspond to any known Google service, further indicating fraudulent intent. Users who may have interacted with web.dimovo.com should immediately revoke any credentials entered on the site and monitor accounts for unauthorized activity. Organizations should update web filters to block the domain and its resolving IP to prevent access. Security teams are advised to correlate this domain with other indicators of compromise, such as the registrar Gname.com Pte. Ltd. and the IP 172.67.130.128, to identify potential lateral movement or additional phishing infrastructure. Multi-factor authentication should be enforced to mitigate credential theft risks associated with brand impersonation attacks.