Phishing detection: google-zh.net

Google
https://google-zh.net Access site
Screenshot
No screenshot available yet Captured automatically on the next refresh cycle
Investigate
Domain google-zh.net2 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 171.22.183.197
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://google-zh.net
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
20 low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelCountry mismatch
12 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Google targeting Chinese-speaking users via a hyphenated lookalike domain with 'zh' suffix, hosted in the Netherlands on BlueVPS. Registered through an abuse-prone registrar; missing HSTS and CSP and outbound link pattern confirm credential-harvesting intent.

Brand in domain labelRegistrar reputationCountry mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-31 · confidence 45%
Domain & Network
Whois
Registrar Gname.com Pte. Ltd.
Network
IP 171.22.183.197
Country The NetherlandsThe Netherlands
Hosting BlueVPS OU
ASN AS62005
TLS Cert -
External detection Google Safe Browsing
GSB category: UNWANTED_SOFTWARE
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-31 05:46 UTC  ·  Last refreshed 2026-08-03 07:30 UTC