Security Scan: Google

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cee25fd3-bb8b-41dc-b179-5c5e672c4e93 Domain and IP registration (RDAP)/api/v1/rdap/cee25fd3-bb8b-41dc-b179-5c5e672c4e93 Certificate Transparency/api/v1/ct/fakegooglepages.pages.dev How often this domain was scanned/api/v1/domain/stats/fakegooglepages.pages.dev Scan history for this domain/api/v1/domain/history/fakegooglepages.pages.dev?limit=15

This website contacted 5 IPs in 1 country across 3 domains to perform 5052 HTTP transactions. The main domain is fakegooglepages.pages.dev and was registered 18 years ago.

Submitted URL: http://fakegooglepages.pages.dev/

Effective URL:

https://fakegooglepages.pages.dev/

Redirected

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Non-Google host impersonating Google: it clones the Google homepage, serves Google's favicon and branding on fakegooglepages.pages.dev. No credential form, but clear brand impersonation and a deceptive hostname make it high-risk.

Risk Factors (5)

Brand impersonation of Google on a non-Google, unranked .pages.dev subdomain

Favicon brand impersonation — Google's icon served from a non-Google host

Deceptive, self-declared 'fake' hostname designed to look Google-affiliated

Hosted on a free instant-publish platform (pages.dev) with unknown subdomain creation date

Inline scripts use encoding/decoding functions (typical of cloned/template pages)

Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Favicon Hash

MMH3: 540608765

MD5: e8972ce34a4545b33c3926a20c306b71

Domain Name Analysis

The domain 'fakegooglepages.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'fakegooglepages'. The second-level label 'pages' is 5 characters long containing two vowels alongside three consonants. Splitting it apart reveals one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

81.49s

Total Load Time

38.4 MB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN

Text Length:236 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business73% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

corporate business

73%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1012	172.66.47.150Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1010	142.251.13.132Google · CDN	United States	AS15169Google LLC
1010	172.66.44.106Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1010	192.178.183.132Google · CDN	United States	AS15169Google LLC
1010	142.251.20.94Google · CDN	United States	AS15169Google LLC
5052	5	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17BD229BBB710743746A3E671612F610A3D73602BB94C845871A8D4F07CB5D8A84A7FFA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:91oc6qfDef6/5/toUSSs6WPhgmIaLiZ4sbJsb/:zoF1Tgmgq/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28516:ABVEiUQJgzPBQVI6EUCjsSQs0HgAKw1QAQgVKikRCwlCwiEATypgAWEAoAJYGhEGzCEiZloLBSAqhFOFGGRlgh+AYAqIA2sP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feffe7e7efffff00

Perceptual Hash:a6f619d909e426f2

Difference Hash:00080c0c080000c0

Wavelet Hash:32330303c3cbff00

Color Hash:#93401f

Other Hashes

Crop Resistant:00080c0c080000c0

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: fakegooglepages.pages.dev