q99rgclfmd59ggd0w4v1wcgi[.]pages[.]dev
“Google”
q99rgclfmd59ggd0w4v1wcgi.pages.dev — 未验证. 品牌冒充:Google; 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 12/91 (ChainPatrol, alphaMountain.ai, BitDefender, CyRadar, ESET); PhishDestroy score 93/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This site, hosted at q99rgclfmd59ggd0w4v1wcgi.pages.dev, presents a page titled "Google" and is designed to impersonate the Gmail brand as part of an email scam. The primary threat is credential theft, as the site mimics a legitimate login page to deceive users into entering their email account credentials.
Technical analysis reveals the domain was created on 2025-11-20 and is registered through Cloudflare, Inc. The site resolves to IP address 142.250.186.100, located in Germany and belonging to AS15169 Google LLC. SSL certification is provided by Google Trust Services / WE1. VirusTotal data shows 7 out of 95 security vendors flagged the site as malicious. It is currently listed on 3 blocklists and has been flagged by ChainPatrol, alphaMountain.ai, CRDF, CyRadar, and Gridinsoft.
The domain status is ACTIVE. GridinSoft assigns a trust score of 0 out of 100, and the DOM risk score is 25. Based on the available data, this site poses a moderate risk due to its active status and impersonation of a trusted brand, though the low detection rate on VirusTotal suggests it may evade some security filters.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of q99rgclfmd59ggd0w4v1wcgi.pages.dev · checked Mar 6, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。