Google logo

Google phishing & impersonation

473
Impersonation sightings
214
Distinct hosts
2026-10-09
Last detected
27
Official domains

ScanMalware watches every scanned site for signs it is impersonating Google — the brand name in the page title or screenshot text, the brand's logo/favicon on a non-official host, and our AI analysis naming the brand. A match on a host outside Google's official domains is recorded below.

Official domains
googleusercontent.comgoogle.grgoogle.com.sagoogle.isgoogle.co.ilgoogle.co.idgoogle.mdgoogle.com.argoogle.com.augmail.comgoogle.itgoogle.co.ukgoogle.fiwithgoogle.comgoogle.iegoogle.comgoogle.clgoogle.nogoogle.jegoogle.com.phgoogle.begoogle.rugoogle.com.brgoogle.chgoogle.com.mmgoogle.co.kegoogle.ae
Also known as
gmail

Sites impersonating Google

100 of 214 hosts · repeat scans of the same host are grouped

SiteVerdictsLast seenActions
sole-cyan-cegf8cxp-dp6s2pfk2z6y.edgeone.dev
Google
RulesLow RiskAIModerate Risk
2026-10-09
View scan →
googlehogxe.com
首页
RulesMaliciousAIHigh Risk
2026-10-09
View scan →
googlenewsgh.com
Google News Gh — Coming Soon
RulesMaliciousAIHigh Risk
2026-10-09
seen 2×
View scan →
santaversenation.com
Verify you are human
RulesHigh RiskAIHigh Risk
2026-10-09
View scan →
azure-sync.tools
Sign in - Google Accounts
RulesLow RiskAIHigh Risk
2026-10-09
View scan →
google.xuanli.workers.dev
Google
RulesMedium RiskAIHigh Risk
2026-10-09
seen 2×
View scan →
vivanacion.com
Verify you are human
RulesLow RiskAIHigh Risk
2026-10-08
View scan →
panamadigitalizado.com
Sign in - Google Accounts
RulesMedium RiskAILow Risk
2026-10-08
View scan →
github.846951943.workers.dev
https://www.google.com/
RulesMedium RiskAIModerate Risk
2026-10-08
View scan →
centrala-administracja.vercel.app
Logowanie Poczta Onet | Bezpieczna i darmowa poczta e-mail
RulesMaliciousAIConfirmed Scam
Google Credential Phishing on cloud hosting
2026-10-08
seen 9×
View scan →
firebasestorage.googleapis.com
RulesMedium RiskAILow Risk
2026-10-07
seen 3×
View scan →
homechefsecrets.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
yummyhomebase.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
ultimategrillhub.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
grillmastersrecipes.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
thegrillinglab.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
grillchefsecrets.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
simplyrecipehub.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
simplegastronomy.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
searedrecipes.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
progrillguide.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
primegrillmaster.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
perfectpitmaster.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
perfectgrillsecrets.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
perfectgrillguide.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
mastermenchefs.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
mastergrillrecipes.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
mastergrillhub.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
grillrecipespro.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
grillmastersvault.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
grillcraftrecipes.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
dailychefhub.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
chefstablehub.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
chefskitchenbox.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-07
View scan →
mobile-connect.pages.dev
Loading Page
RulesLow RiskAIModerate Risk
2026-10-06
seen 34×
View scan →
youtubeloginpage.netlify.app
Sign in - Google Accounts
RulesHigh RiskAIConfirmed Scam
Credential Phishing on disposable hosting
2026-10-06
View scan →
captcha-connect.pages.dev
Loading Page
RulesMedium RiskAIHigh Risk
2026-10-06
seen 18×
View scan →
web-protect.pages.dev
Loading Page
RulesMedium RiskAIHigh Risk
2026-10-06
seen 26×
View scan →
connect-captcha.pages.dev
Loading Page
RulesHigh RiskAIModerate Risk
2026-10-06
seen 26×
View scan →
app-captchav2.pages.dev
Loading Page
RulesLow RiskAIHigh Risk
2026-10-06
seen 6×
View scan →
5o8n.j3de6.com
502 Bad Gateway
RulesLow RiskAIHigh Risk
2026-10-06
seen 2×
View scan →
bladze.pages.dev
BLADZE
RulesLow RiskAIModerate Risk
2026-10-05
seen 2×
View scan →
bleacont.surge.sh
Drive - Shared
RulesLow RiskAIHigh Risk
2026-10-05
View scan →
youtubesecuritypage.netlify.app
Sign in - Google Accounts
RulesHigh RiskAIConfirmed Scam
Credential Phishing on disposable hosting
2026-10-05
seen 3×
View scan →
mobile-escad.pages.dev
Loading Page
RulesMedium RiskAIHigh Risk
2026-10-04
seen 4×
View scan →
fakegooglepages.pages.dev
Google
RulesLow RiskAIHigh Risk
2026-10-04
seen 10×
View scan →
grillgastronomy.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-04
seen 2×
View scan →
thegrillbible.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIHigh Risk
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-04
View scan →
yumrecipebox.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-04
View scan →
pitmasterrecipes.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIHigh Risk
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-04
seen 2×
View scan →
cookerycircle.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIHigh Risk
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-04
seen 2×
View scan →
kitchensecretbook.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIConfirmed Scam
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-04
seen 2×
View scan →
progrillmenu.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIHigh Risk
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-04
seen 2×
View scan →
perfectgrillmeals.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIHigh Risk
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-04
seen 2×
View scan →
recipebistro.com
Promote Your Business with Merchant Center - Google for Retail
RulesMaliciousAIHigh Risk
Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)
2026-10-04
seen 2×
View scan →
mvl.whm.www.app.admin.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-10-04
View scan →
whm.5031mvl.whm.www.app.admin.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-10-04
seen 2×
View scan →
phantom-2i8.pages.dev
PHANTOM
RulesLow RiskAIHigh Risk
2026-10-04
View scan →
whm.www.demo.www.api.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-10-04
seen 2×
View scan →
9whm.5031mvl.whm.www.app.admin.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-10-03
seen 3×
View scan →
jucoin-trade.top
Jucoin
RulesMedium RiskAIModerate Risk
2026-10-03
View scan →
mvl.www.app.admin.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-10-02
View scan →
0whm.www.status.admin.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-10-02
View scan →
iyimwiodtvqeguv.pages.dev
RulesLow RiskAIModerate Risk
2026-10-01
View scan →
accounts-dk-redirection.91-218-65-223.plesk.page
RulesHigh RiskAIHigh Risk
Cloaked Google lure on disposable hosting
2026-10-01
seen 2×
View scan →
botakpedasjeletot.pages.dev
Google
RulesLow RiskAIHigh Risk
2026-09-30
seen 6×
View scan →
whm.test.staging.www.ny.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-30
seen 2×
View scan →
googleplaypartnerportal.com
Google Play Partner Portal
RulesLow RiskAIModerate Risk
2026-09-29
View scan →
jiasu.511649846.workers.dev
Google
RulesLow RiskAIHigh Risk
2026-09-29
seen 2×
View scan →
whm.whm.whm.mvl.status.api.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-29
seen 2×
View scan →
mvd.4whm.whm.www.status.admin.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-28
seen 2×
View scan →
21www.www.www.app.admin.mw.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-27
seen 3×
View scan →
googp.vercel.app
404: NOT_FOUND
RulesHigh RiskAIHigh Risk
2026-09-25
View scan →
blasttrack.se
Logga in – Blast Track lagerkontroll
RulesMedium RiskAIModerate Risk
2026-09-25
View scan →
check-poczta.vercel.app
Logowanie Poczta Onet | Bezpieczna i darmowa poczta e-mail
RulesMaliciousAIConfirmed Scam
Google Credential Phishing on cloud hosting
2026-09-25
seen 4×
View scan →
minfordonsbok.se
Mina Fordon – Håll koll på alla dina fordon
RulesLow RiskAIModerate Risk
2026-09-24
View scan →
wow.naugia.workers.dev
Google
RulesLow RiskAIHigh Risk
2026-09-24
seen 2×
View scan →
dev.2whm.update.staging.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-23
View scan →
mail.hostinger.com
Log in to Hostinger Mail
RulesMaliciousAIConfirmed Scam
Known Kit: Multi-Brand pages.dev Phish Kit — jg.js (universal handler) (multibrand-pagesdev-phish)
2026-09-23
seen 10×
View scan →
ge2nyj6ay04qz1fr.www.admin.www.da.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-23
seen 2×
View scan →
mvl.086whm.1www.admin.staging.www.ny.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-23
View scan →
ktazudbz4pasyaif.staging.api.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-23
View scan →
ftp.admin.www.da.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-23
seen 2×
View scan →
antonkronaj-dev.pages.dev
how to treat - Google Search
RulesLow RiskAIHigh Risk
2026-09-23
View scan →
spatial-silver-scveaf7w-dpapehtkzxhf.edgeone.dev
KFilm - بەڕێوەبردن
RulesHigh RiskAIModerate Risk
Credential Phishing on disposable hosting
2026-09-23
View scan →
ge2nyj6ay04qz1fr.654www.www.www.status.admin.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-23
View scan →
googlee-playstors.vercel.app
Ambev Rastreio — Google Play
RulesLow RiskAIHigh Risk
2026-09-22
View scan →
os-d.storage.googleapis.com
RulesLow RiskAInot assessed
2026-09-22
View scan →
dancing-granita-409f14.netlify.app
PUBG Mobile - UC
RulesHigh RiskAIHigh Risk
Credential Phishing on disposable hosting
2026-09-22
View scan →
whm.whm.test.staging.www.ny.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-22
View scan →
imk7fmbc4m1ai3un.demo.staging.ny.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-22
View scan →
mvd.whm.www.app.admin.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-21
View scan →
mvd.1www.www.www.app.admin.mw.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-21
View scan →
admin.admin.as.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-20
View scan →
jtwgrbsl.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-20
seen 2×
View scan →
tiquetesviajerosvip.cc
Sign In - Google Accounts
RulesLow RiskAIHigh Risk
2026-09-20
View scan →
au.0test.staging.ny.152-53-37-155.plesk.page
Google
RulesLow RiskAIModerate Risk
2026-09-19
View scan →
pendo-io-static.storage.googleapis.com
RulesLow RiskAInot assessed
2026-09-19
View scan →
redtasf.vercel.app
Verification
RulesMaliciousAIHigh Risk
2026-09-19
seen 2×
View scan →
gl.1038742935.workers.dev
Google
RulesLow RiskAIHigh Risk
2026-09-17
seen 2×
View scan →

106 further hosts are not listed: the Google name appeared on them, but both our rule engine and our AI analysis rated the page harmless, so we do not publish them as impersonation.