Russian Intelligence Services CMA phishing campaign

g00gle.tech · 24 additional domains

Observed: 26 June 2026

What is this?

The upstream archive observed this seizure notice on 26 June 2026 and associated it with 25 domain s. The visual state is preserved below. Why the domains were seized must be established from the linked reporting or a future case-level review, not guessed from the artwork.

Before and after

BEFORE is shown only when a separately sourced public capture exists strictly before the seizure date. AFTER is the content-addressed upstream seizure-banner object.

Associated domains

These are archival labels, not live links. A seized, expired, or reassigned domain is a poor place to send readers without warning.

g00gle.tech
forum-connect.online
whats-auth.online
check-group-route.site
drive-gl.site
forumone.site
kvertus.site
pankalil.site
amltrustlab.online
forum-doc.online
tech-group.online
cloud-store.site
drive-go.site
form-drive.site
forum-sheet.online
candidate-profile.site
drive-forms.site
group-privat.online
panel-my-test.online
clickcredit.site

Show 5 additional domain labels

drive-glg.site
fuckyoubitch.site
lvivmediaforum.site
forum-one.site
ibank-asb.site

seized.fyi states that its domain lists are not always complete. Count: 25.

Why was it seized?

The upstream record links the reporting below. OpenSpy preserves those references but does not convert a headline into a stronger legal claim.

Supporting report 1 — ic3.gov

Preserved artifact

OpenSpy object: Open preserved original
Upstream record: seized.fyi
Observed: 2026-06-26
Media: image/jpeg
Resolution: 1280×720
Bytes: 269,730
SHA-256: 6b8bd8245c4cd8b5e3a1232468d21950ee9b214b1c83c199791c4805276771a7
Upstream filename: 6b8bd8245c4cd8b5e3a1232468d21950.jpg