Google phishing & impersonation
Tech & Cloudgoogleusercontent.com
342
Sites impersonating it
207
New in the last 30 days
0
Campaigns
2026-11-14
Last detected
Official domains
googleusercontent.comgoogle.grgoogle.com.sagoogle.isgoogle.co.ilgoogle.co.idgoogle.mdgoogle.com.argoogle.com.augmail.comgoogle.itgoogle.co.ukgoogle.fiwithgoogle.comgoogle.iegoogle.comgoogle.clgoogle.nogoogle.jegoogle.com.phgoogle.begoogle.rugoogle.com.brgoogle.chgoogle.com.mmgoogle.co.kegoogle.ae
A match on a host outside these domains is recorded as impersonation. We look for the brand name in the address, page title and screenshot, its logo on a non-official site, and our AI analysis naming it.
Also known as
gmailgoogleplaygoogle playrecaptchagoogle recaptcha
Sites impersonating Google
50 of 342 sites · newest first · repeat scans of a site are grouped
125 lower-risk copies are not shown: sites that use the Google name or design, but that neither our rule engine nor our AI analysis rates high risk (for example harmless copies of the brand's own pages). Show them
RulesMaliciousAIHigh Risk“Google” in the hostnameAI analysis
googley8rb.com 2026-10-18RulesMaliciousAIHigh Risk“Google” in the hostnameAI analysis
googlet0np.com 2026-10-18RulesMaliciousAIConfirmed Scam“Google” in the hostnameAI analysis
googles6yf.com 2026-10-18RulesMaliciousAIConfirmed Scam“Google” in the hostnameAI analysis
RulesMaliciousAIConfirmed ScamKnown Kit: Chinese-language fake software download sites (Google Chrome, WPS Office, QuickQ, Sunlogin) behind a search-engine cloak (cn-fake-software-seo-2026-10)“Google” in the hostnameAI analysis
RulesHigh RiskAIHigh Risk“Google” in the hostnameAI analysis
RulesMaliciousAIHigh RiskKnown Kit: Chinese-language fake software download sites (Google Chrome, WPS Office, QuickQ, Sunlogin) behind a search-engine cloak (cn-fake-software-seo-2026-10)“Google” in the hostnameAI analysis
RulesLow RiskAIHigh Risk“Google” in the hostnameAI analysis
RulesMaliciousAIHigh RiskKnown Kit: Chinese-language fake software download sites (Google Chrome, WPS Office, QuickQ, Sunlogin) behind a search-engine cloak (cn-fake-software-seo-2026-10)“Google” in the hostnameAI analysis
RulesMaliciousAIHigh RiskKnown Kit: Chinese-language fake software download sites (Google Chrome, WPS Office, QuickQ, Sunlogin) behind a search-engine cloak (cn-fake-software-seo-2026-10)“Google” in the hostnameAI analysis
RulesMaliciousAIHigh RiskKnown Kit: Chinese-language fake software download sites (Google Chrome, WPS Office, QuickQ, Sunlogin) behind a search-engine cloak (cn-fake-software-seo-2026-10)“Google” in the hostnameAI analysis
RulesLow RiskAIHigh Risk“Google” in the page titleAI analysis
RulesMaliciousAIConfirmed Scam“Google” in the hostnameAI analysis
RulesLow RiskAIHigh RiskIdentified as Google by our AI analysisAI analysis
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Google” in the page titlePage text
RulesMaliciousAIHigh Risk“Google” in the hostnamePage text
RulesLow RiskAIHigh Risk“Google” in the page titleAI analysis
RulesHigh RiskAIHigh Risk“Google” in the hostnameAI analysis
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Google” in page or screenshot textScreenshot text
RulesLow RiskAIHigh Risk“Google” in the page titleAI analysis
RulesLow RiskAIHigh Risk“Google” in the page titleAI analysis
RulesMaliciousAIHigh Risk“Google” in the hostnameAI analysis
RulesMaliciousAIHigh Risk“Google” in the hostnameAI analysis
RulesHigh RiskAIHigh RiskIdentified as Google by our AI analysisAI analysis
RulesLow RiskAIHigh Risk“Google” in the page titleAI analysis
RulesMedium RiskAIHigh Risk“Google” in the hostnameAI analysisLogo / favicon
RulesLow RiskAIHigh RiskIdentified as Google by our AI analysisAI analysis
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleAI analysis
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleAI analysis
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleAI analysis
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
RulesMaliciousAIConfirmed ScamKnown Kit: ClickFix: hidden fake Cloudflare check that fetches the Win+R command on click — page code (clickfix-cf-modal-remote-cmd-2026-10)“Google” in the page titleIdentical page
176 further sites are not listed at all: the Google name appeared on them, but we judged them not to be impersonation (both our rule engine and our AI analysis rated the page harmless, the page only mentions the brand, or it is a copy of another public website).