Observed role
Phishing infrastructure
Role derived only from stored classifications and tags.
Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Indicator
share.google
Type domain · source intel_report_ingest
Investigation
90
Verdict
PHISHING — Intel Report Ingest
- What is this
- Phishing domain. Registered 19 months ago.
- Should you care
- Yes — flagged as phishing by Intel Report Ingest.
- What to do
- Block it.
INVESTIGATEMODERATE EVIDENCE COVERAGEDeterministic · stored evidence only
Domain investigation
Phishing infrastructure requires investigation
The warehouse identifies this domain as phishing. It was registered 19 months ago. 5 stored citations support the local history. Domain ownership, hosting, and content can change, so attribution remains bounded to the cited observation.
Registration
19 months ago
2025-01-15 · MarkMonitor Inc.
Certificate history
Not established
Certificate Transparency lookup did not complete.
Current DNS
1 current IPv4 address
216.239.32.27 · observed 2026-08-07
Corpus evidence
2 connectors · 5 citations
Generic co-tags were excluded to avoid false relationships.
Observation window
2026-06-27 → 2026-08-03
First and last appearance in the local corpus, not global activity dates.
What the evidence supports
Findings stay bounded to named sources and observable infrastructure.
What remains unknown
- Certificate Transparency did not complete, so issuance history is unknown.
- No explicitly tagged family or campaign peer is available; generic co-tags were not treated as relationships.
- Domains can be transferred, parked, sinkholed, or repointed after the recorded observation.
What this is
Domain indicator: share.google
Mentioned in Microsoft Security Blog research ingest
Live page
Screenshot of the actual page, via urlscan.io. Hover to view full.
via urlscan.io· scanned 2026-07-21
Threat detail
Exploitation status and malware-family attribution from stored fields.
exploitation: unknown
Graph preview
Neighborhood topology. Open the graph for interactive pivots.
Building relationship previewacquiring
Loading connected indicators, reports and entities.
Continue investigation
High-signal pivots without leaving the thread you started in search.
- Related alerts, reports, and entities
Structured pivots from local graph context.
- Open in graph
Full investigation canvas with neighbor expansion.