support-google.pl: Google 사칭. PhishDestroy가 2026-10-10에 탐지했습니다. 위험도: 심각 (100/100). 등록 대행자: nazwa.pl sp. z o.o. 상태: 마지막으로 알려진 활성. 호스팅: NETARTGROUP Nazwa.pl Sp.z.o.o., PL. PhishDestroy는 악용 신고 1건을 보냈습니다. VirusTotal: 엔진 10/92개가 탐지. 로그인 정보를 입력하거나 지갑을 연결하지 마세요.
“support-google.pl”
등록기관
nazwa.pl sp. z o.o
Resolved IP
85.128.244.69
Registered
2026년 10월 9일
PhishDestroy assessment
심각100/100증거 점수
가용성
마지막으로 알려진 활성최근에 저장된 도달 가능성 관찰관측됨 · HTTP probe
위험 신호
VirusTotal 탐지: 10/92저장된 차단 목록 일치 항목: 2자동 브랜드 라벨: Google젊은 도메인: 13일 전
탐지를 보고하는 보안 엔진: 10. 일치를 보고하는 공개 차단 목록: 2. 극도의 주의를 기울이십시오 — 자격 증명이나 개인 정보를 입력하지 마십시오.
ABUSE NOTICE · 7D+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@netart.com.
The latest stored availability evidence still shows the domain reachable; 12 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations.
This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
support-google.pl is a phishing site that impersonates Google by presenting itself as a support portal. It targets Google users who expect help with their accounts. PhishDestroy first flagged it on 2026-10-10. As of 2026-10-19 the site was still online and serving content.
How the scam works
The page title is just the bare domain, so the deception rests on the address itself. A hyphenated name like support-google reads as official at a glance, especially in a link from a message warning about a locked account or a security problem. Fake support pages of this kind steer visitors into entering their Google email and password, one-time codes, or recovery details. Some also push victims to contact a fake support agent. Whatever is typed goes to the operators, who can use it to take over the account and everything linked to it, including email, cloud storage and any crypto services secured through that inbox.
Evidence
On 2026-10-14, 10 of 92 VirusTotal engines classified the domain as malicious. Flagging vendors include alphaMountain.ai, BitDefender, CRDF, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data and Gridinsoft. That count is modest, so many browsers and filters may still load the page without a warning. The domain is listed on the MetaMask and SEAL blocklists alongside PhishDestroy, which signals concern from crypto-focused defenders. It also appears in two AlienVault OTX threat pulses.
Infrastructure
The domain was registered on 2026-10-09 through nazwa.pl sp. z o.o., one day before PhishDestroy detected it. A gap that short is typical of throwaway phishing domains set up for immediate use. It resolves to 85.128.244.69 on the NETARTGROUP Nazwa.pl network in Poland. Its domain-validated TLS certificate was issued by nazwa.pl's own certificate authority, so registration, hosting and the padlock all come from one provider. The padlock only shows the connection is encrypted and says nothing about whether the site is legitimate.
What to do
If you entered your Google password on this site, change it immediately from the real Google account page. Then review recent security activity and sign out every unfamiliar session. Turn on or reset two-step verification, preferably with a passkey or security key. Check that your recovery email and phone number have not been changed. Change the password on any other service that shared it, and if you gave out a wallet recovery phrase, move your funds to a new wallet at once. Security teams should block the domain and its IP address, search mail and proxy logs for visits, and report it to the registrar and hosting provider.
아니요. PhishDestroy는 support-google.pl을(를) Google 사칭(으)로 분류합니다(위험도: 심각, 100/100). 처음 탐지된 날짜는 2026-10-10입니다. VirusTotal: 엔진 10/92개가 탐지. 안전하지 않은 사이트로 취급하세요.
support-google.pl에 지갑을 연결해도 안전한가요?
아니요. support-google.pl에서 지갑을 연결하거나 메시지에 서명하거나 토큰을 승인하지 마세요. 피싱 사이트는 운영자가 자산을 옮길 수 있게 하는 승인(approve, setApprovalForAll, Permit2)을 요청하며, 확정된 거래는 되돌릴 수 없습니다.
support-google.pl을(를) 이용했다면 어떻게 해야 하나요?
그곳에 입력한 모든 비밀번호를 바꾸고 2단계 인증을 켜세요. 지갑을 연결했거나 무언가에 서명했다면 승인을 취소하고 남은 자금을 새 지갑으로 옮기세요. 시드 문구는 절대 공유하지 마세요. 단계별 안내: 긴급 대응 가이드.
Evidence layersAvailability: Content servingContent: Content served at rootDNS: ResolvedRegistration: Unknown
Latest HTTP observation활성 콘텐츠Ordinary HTTP content served90%2026-10-22 10:33:44 UTC
RDAP registration알 수 없음
Observed timelinelast reachable: 2026-10-22 10:33:44 UTClast content: 2026-10-22 10:33:44 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
기술 · 3 identified
A
Apache HTTP Server
Web servers
Apache is a free and open-source cross-platform web server software.
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.
(PL)
