ScanMalware.com
Google logo

Google phishing & impersonation

Tech & Cloudgoogleusercontent.com
342
Sites impersonating it
207
New in the last 30 days
11
Campaigns
2026-11-14
Last detected
New sites per day, last 90 days313 new sites · busiest day 67
2026-08-20: 2 new sites2026-08-21: 1 new site2026-08-22: 2 new sites2026-08-23: 1 new site2026-08-25: 1 new site2026-08-27: 1 new site2026-08-29: 4 new sites2026-08-30: 4 new sites2026-09-02: 1 new site2026-09-08: 1 new site2026-09-10: 3 new sites2026-09-11: 2 new sites2026-09-12: 1 new site2026-09-13: 1 new site2026-09-14: 1 new site2026-09-16: 9 new sites2026-09-17: 3 new sites2026-09-18: 2 new sites2026-09-19: 1 new site2026-09-20: 1 new site2026-09-21: 1 new site2026-09-22: 3 new sites2026-09-23: 2 new sites2026-09-24: 1 new site2026-09-25: 1 new site2026-09-27: 3 new sites2026-09-28: 4 new sites2026-09-29: 1 new site2026-10-01: 1 new site2026-10-04: 10 new sites2026-10-05: 1 new site2026-10-06: 1 new site2026-10-07: 23 new sites2026-10-08: 1 new site2026-10-09: 5 new sites2026-10-11: 2 new sites2026-10-14: 2 new sites2026-10-15: 3 new sites2026-10-16: 2 new sites2026-10-18: 12 new sites2026-10-19: 1 new site2026-10-20: 4 new sites2026-10-21: 3 new sites2026-10-22: 4 new sites2026-10-23: 1 new site2026-10-24: 6 new sites2026-10-25: 15 new sites2026-10-26: 67 new sites2026-10-27: 2 new sites2026-10-28: 2 new sites2026-10-29: 4 new sites2026-10-30: 8 new sites2026-10-31: 5 new sites2026-11-01: 4 new sites2026-11-02: 6 new sites2026-11-03: 10 new sites2026-11-04: 18 new sites2026-11-05: 9 new sites2026-11-06: 4 new sites2026-11-07: 2 new sites2026-11-08: 1 new site2026-11-09: 4 new sites2026-11-10: 2 new sites2026-11-11: 3 new sites2026-11-12: 4 new sites2026-11-13: 2 new sites2026-11-14: 1 new site
2026-08-172026-11-14
Where these sites are hosted

173 on free hosting platforms, 169 on 162 registered domains

web.app · 39firebaseapp.com · 38netlify.app · 30vercel.app · 21pages.dev · 15workers.dev · 13.com · 122.com.cn · 6.dev · 4.cc · 3.top · 3.net · 3

Campaigns

Phishing kits we track as hunts, and how many of the sites below each one covers. A site can belong to more than one.

ClickFix: copied Google Merchant Center page on a non-Google domain — page titlehigh
32 of 342 sites · last 2026-10-07
1 related hunt
Chinese-language fake software download sites (Google Chrome, WPS Office, QuickQ, Sunlogin) behind a search-engine cloakcritical
7 of 342 sites · last 2026-10-18
Google account sign-in phishing operator: fake agency meeting lures and Google look-alike domainscritical
5 of 342 sites · last 2026-10-24
Cloudflare Workers Phishing Kits (device-code / EvilToken & brand lures)critical
3 of 342 sites · last 2026-10-30
Brand look-alike doorway network: Russian copies of software and AI product pages funnelling to app[.]slidy[.]ailow
3 of 342 sites · last 2026-10-17
Multi-step sign-in phishing kit with credential and verification handlershigh
1 of 342 site · last 2026-10-30
Google Drive shared-file lure behind a Turnstile gate, leading to a fake Google sign-in relayed to the operatorcritical
1 of 342 site · last 2026-10-21
AgtaBackup operator: fake Google Meet, Zoom and Google Drive update pages that install remote-access agentscritical
1 of 342 site · last 2026-10-21
"Protected document" invoice sign-in kit that sends credentials to Telegramcritical
1 of 342 site · last 2026-10-18
ErrTraffic / Exvicy — check-in servers (178.16.52.101, 158.94.208.87) and their rotating domainscritical
1 of 342 site · last 2026-10-10
1 related hunt
Windows ClickFix: 'Human Verification' overlay (Win+X, Terminal) — injected blockchain loadercritical
1 of 342 site · last 2026-10-10
Official domains
googleusercontent.comgoogle.grgoogle.com.sagoogle.isgoogle.co.ilgoogle.co.idgoogle.mdgoogle.com.argoogle.com.augmail.comgoogle.itgoogle.co.ukgoogle.fiwithgoogle.comgoogle.iegoogle.comgoogle.clgoogle.nogoogle.jegoogle.com.phgoogle.begoogle.rugoogle.com.brgoogle.chgoogle.com.mmgoogle.co.kegoogle.ae

A match on a host outside these domains is recorded as impersonation. We look for the brand name in the address, page title and screenshot, its logo on a non-official site, and our AI analysis naming it.

Also known as
gmailgoogleplaygoogle playrecaptchagoogle recaptcha

Sites impersonating Google

50 of 342 sites · newest first · repeat scans of a site are grouped

125 lower-risk copies are not shown: sites that use the Google name or design, but that neither our rule engine nor our AI analysis rates high risk (for example harmless copies of the brand's own pages). Show them

176 further sites are not listed at all: the Google name appeared on them, but we judged them not to be impersonation (both our rule engine and our AI analysis rated the page harmless, the page only mentions the brand, or it is a copy of another public website).

← All monitored brandsSearch these scansDownload CSVDownload JSONAPI