
Google phishing & impersonation
Tech & Cloudgoogleusercontent.com
473
Impersonation sightings
214
Distinct hosts
2026-10-09
Last detected
27
Official domains
ScanMalware watches every scanned site for signs it is impersonating Google — the brand name in the page title or screenshot text, the brand's logo/favicon on a non-official host, and our AI analysis naming the brand. A match on a host outside Google's official domains is recorded below.
Official domains
googleusercontent.comgoogle.grgoogle.com.sagoogle.isgoogle.co.ilgoogle.co.idgoogle.mdgoogle.com.argoogle.com.augmail.comgoogle.itgoogle.co.ukgoogle.fiwithgoogle.comgoogle.iegoogle.comgoogle.clgoogle.nogoogle.jegoogle.com.phgoogle.begoogle.rugoogle.com.brgoogle.chgoogle.com.mmgoogle.co.kegoogle.ae
Also known as
gmail
Sites impersonating Google
100 of 214 hosts · repeat scans of the same host are grouped
| Site | Verdicts | Last seen | Actions |
|---|---|---|---|
| sole-cyan-cegf8cxp-dp6s2pfk2z6y.edgeone.dev Google | RulesLow RiskAIModerate Risk | 2026-10-09 | View scan → |
| googlehogxe.com 首页 | RulesMaliciousAIHigh Risk | 2026-10-09 | View scan → |
| googlenewsgh.com Google News Gh — Coming Soon | RulesMaliciousAIHigh Risk | 2026-10-09 seen 2× | View scan → |
| santaversenation.com Verify you are human | RulesHigh RiskAIHigh Risk | 2026-10-09 | View scan → |
| azure-sync.tools Sign in - Google Accounts | RulesLow RiskAIHigh Risk | 2026-10-09 | View scan → |
| google.xuanli.workers.dev Google | RulesMedium RiskAIHigh Risk | 2026-10-09 seen 2× | View scan → |
| vivanacion.com Verify you are human | RulesLow RiskAIHigh Risk | 2026-10-08 | View scan → |
| panamadigitalizado.com Sign in - Google Accounts | RulesMedium RiskAILow Risk | 2026-10-08 | View scan → |
| github.846951943.workers.dev https://www.google.com/ | RulesMedium RiskAIModerate Risk | 2026-10-08 | View scan → |
| centrala-administracja.vercel.app Logowanie Poczta Onet | Bezpieczna i darmowa poczta e-mail | RulesMaliciousAIConfirmed Scam Google Credential Phishing on cloud hosting | 2026-10-08 seen 9× | View scan → |
| firebasestorage.googleapis.com | RulesMedium RiskAILow Risk | 2026-10-07 seen 3× | View scan → |
| homechefsecrets.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| yummyhomebase.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| ultimategrillhub.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| grillmastersrecipes.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| thegrillinglab.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| grillchefsecrets.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| simplyrecipehub.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| simplegastronomy.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| searedrecipes.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| progrillguide.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| primegrillmaster.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| perfectpitmaster.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| perfectgrillsecrets.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| perfectgrillguide.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| mastermenchefs.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| mastergrillrecipes.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| mastergrillhub.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| grillrecipespro.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| grillmastersvault.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| grillcraftrecipes.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| dailychefhub.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| chefstablehub.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| chefskitchenbox.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-07 | View scan → |
| mobile-connect.pages.dev Loading Page | RulesLow RiskAIModerate Risk | 2026-10-06 seen 34× | View scan → |
| youtubeloginpage.netlify.app Sign in - Google Accounts | RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting | 2026-10-06 | View scan → |
| captcha-connect.pages.dev Loading Page | RulesMedium RiskAIHigh Risk | 2026-10-06 seen 18× | View scan → |
| web-protect.pages.dev Loading Page | RulesMedium RiskAIHigh Risk | 2026-10-06 seen 26× | View scan → |
| connect-captcha.pages.dev Loading Page | RulesHigh RiskAIModerate Risk | 2026-10-06 seen 26× | View scan → |
| app-captchav2.pages.dev Loading Page | RulesLow RiskAIHigh Risk | 2026-10-06 seen 6× | View scan → |
| 5o8n.j3de6.com 502 Bad Gateway | RulesLow RiskAIHigh Risk | 2026-10-06 seen 2× | View scan → |
| bladze.pages.dev BLADZE | RulesLow RiskAIModerate Risk | 2026-10-05 seen 2× | View scan → |
| bleacont.surge.sh Drive - Shared | RulesLow RiskAIHigh Risk | 2026-10-05 | View scan → |
| youtubesecuritypage.netlify.app Sign in - Google Accounts | RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting | 2026-10-05 seen 3× | View scan → |
| mobile-escad.pages.dev Loading Page | RulesMedium RiskAIHigh Risk | 2026-10-04 seen 4× | View scan → |
| fakegooglepages.pages.dev Google | RulesLow RiskAIHigh Risk | 2026-10-04 seen 10× | View scan → |
| grillgastronomy.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-04 seen 2× | View scan → |
| thegrillbible.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIHigh Risk Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-04 | View scan → |
| yumrecipebox.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-04 | View scan → |
| pitmasterrecipes.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIHigh Risk Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-04 seen 2× | View scan → |
| cookerycircle.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIHigh Risk Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-04 seen 2× | View scan → |
| kitchensecretbook.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIConfirmed Scam Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-04 seen 2× | View scan → |
| progrillmenu.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIHigh Risk Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-04 seen 2× | View scan → |
| perfectgrillmeals.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIHigh Risk Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-04 seen 2× | View scan → |
| recipebistro.com Promote Your Business with Merchant Center - Google for Retail | RulesMaliciousAIHigh Risk Known Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10) | 2026-10-04 seen 2× | View scan → |
| mvl.whm.www.app.admin.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-10-04 | View scan → |
| whm.5031mvl.whm.www.app.admin.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-10-04 seen 2× | View scan → |
| phantom-2i8.pages.dev PHANTOM | RulesLow RiskAIHigh Risk | 2026-10-04 | View scan → |
| whm.www.demo.www.api.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-10-04 seen 2× | View scan → |
| 9whm.5031mvl.whm.www.app.admin.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-10-03 seen 3× | View scan → |
| jucoin-trade.top Jucoin | RulesMedium RiskAIModerate Risk | 2026-10-03 | View scan → |
| mvl.www.app.admin.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-10-02 | View scan → |
| 0whm.www.status.admin.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-10-02 | View scan → |
| iyimwiodtvqeguv.pages.dev | RulesLow RiskAIModerate Risk | 2026-10-01 | View scan → |
| accounts-dk-redirection.91-218-65-223.plesk.page | RulesHigh RiskAIHigh Risk Cloaked Google lure on disposable hosting | 2026-10-01 seen 2× | View scan → |
| botakpedasjeletot.pages.dev Google | RulesLow RiskAIHigh Risk | 2026-09-30 seen 6× | View scan → |
| whm.test.staging.www.ny.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-30 seen 2× | View scan → |
| googleplaypartnerportal.com Google Play Partner Portal | RulesLow RiskAIModerate Risk | 2026-09-29 | View scan → |
| jiasu.511649846.workers.dev Google | RulesLow RiskAIHigh Risk | 2026-09-29 seen 2× | View scan → |
| whm.whm.whm.mvl.status.api.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-29 seen 2× | View scan → |
| mvd.4whm.whm.www.status.admin.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-28 seen 2× | View scan → |
| 21www.www.www.app.admin.mw.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-27 seen 3× | View scan → |
| googp.vercel.app 404: NOT_FOUND | RulesHigh RiskAIHigh Risk | 2026-09-25 | View scan → |
| blasttrack.se Logga in – Blast Track lagerkontroll | RulesMedium RiskAIModerate Risk | 2026-09-25 | View scan → |
| check-poczta.vercel.app Logowanie Poczta Onet | Bezpieczna i darmowa poczta e-mail | RulesMaliciousAIConfirmed Scam Google Credential Phishing on cloud hosting | 2026-09-25 seen 4× | View scan → |
| minfordonsbok.se Mina Fordon – Håll koll på alla dina fordon | RulesLow RiskAIModerate Risk | 2026-09-24 | View scan → |
| wow.naugia.workers.dev Google | RulesLow RiskAIHigh Risk | 2026-09-24 seen 2× | View scan → |
| dev.2whm.update.staging.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-23 | View scan → |
| mail.hostinger.com Log in to Hostinger Mail | RulesMaliciousAIConfirmed Scam Known Kit: Multi-Brand pages.dev Phish Kit — jg.js (universal handler) (multibrand-pagesdev-phish) | 2026-09-23 seen 10× | View scan → |
| ge2nyj6ay04qz1fr.www.admin.www.da.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-23 seen 2× | View scan → |
| mvl.086whm.1www.admin.staging.www.ny.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-23 | View scan → |
| ktazudbz4pasyaif.staging.api.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-23 | View scan → |
| ftp.admin.www.da.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-23 seen 2× | View scan → |
| antonkronaj-dev.pages.dev how to treat - Google Search | RulesLow RiskAIHigh Risk | 2026-09-23 | View scan → |
| spatial-silver-scveaf7w-dpapehtkzxhf.edgeone.dev KFilm - بەڕێوەبردن | RulesHigh RiskAIModerate Risk Credential Phishing on disposable hosting | 2026-09-23 | View scan → |
| ge2nyj6ay04qz1fr.654www.www.www.status.admin.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-23 | View scan → |
| googlee-playstors.vercel.app Ambev Rastreio — Google Play | RulesLow RiskAIHigh Risk | 2026-09-22 | View scan → |
| os-d.storage.googleapis.com | RulesLow RiskAInot assessed | 2026-09-22 | View scan → |
| dancing-granita-409f14.netlify.app PUBG Mobile - UC | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-09-22 | View scan → |
| whm.whm.test.staging.www.ny.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-22 | View scan → |
| imk7fmbc4m1ai3un.demo.staging.ny.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-22 | View scan → |
| mvd.whm.www.app.admin.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-21 | View scan → |
| mvd.1www.www.www.app.admin.mw.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-21 | View scan → |
| admin.admin.as.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-20 | View scan → |
| jtwgrbsl.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-20 seen 2× | View scan → |
| tiquetesviajerosvip.cc Sign In - Google Accounts | RulesLow RiskAIHigh Risk | 2026-09-20 | View scan → |
| au.0test.staging.ny.152-53-37-155.plesk.page Google | RulesLow RiskAIModerate Risk | 2026-09-19 | View scan → |
| pendo-io-static.storage.googleapis.com | RulesLow RiskAInot assessed | 2026-09-19 | View scan → |
| redtasf.vercel.app Verification | RulesMaliciousAIHigh Risk | 2026-09-19 seen 2× | View scan → |
| gl.1038742935.workers.dev Google | RulesLow RiskAIHigh Risk | 2026-09-17 seen 2× | View scan → |
106 further hosts are not listed: the Google name appeared on them, but both our rule engine and our AI analysis rated the page harmless, so we do not publish them as impersonation.