Phishing detection: support.google.com.search.er.in

Google
https://support.google.com.search.er.in Access site
Screenshot
Screenshot of support.google.com.search.er.in
Investigate
Domain support.google.com.search.er.in117 CT hosts on apex
URL https://support.google.com.search.er.in
Phishunt analysis Beta
40 high suspicion likely_phishingheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +4.1 Site cluster
  • +2.6 Brand in subdomain
  • +2.4 ASN reputation
  • +1.7 Shared IP cluster
  • +1.1 Cert reuse
  • +1.1 No CSP header
  • +0.9 Young certificate
  • +0.8 Brand + login token
  • +0.8 Young domain
  • +0.7 Brand in cert SAN
  • +0.7 Unrecognised DNS provider
  • +0.6 Long domain
  • +0.6 Final host mismatch
  • +0.6 Registrar reputation
  • +0.6 Deep subdomain
  • +0.6 Suspicious TLD
  • +0.3 Free CA
  • +0.1 External scripts
26 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Google Support with a subdomain of an unrelated domain (search.er.in) hosted on Amazon. The page title uses the Google brand and it redirects to a different final host. Flagged by Google Safe Browsing as social engineering.

Google Safe BrowsingBrand + login tokenBrand in title
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-29 · confidence 80%
Domain & Network
Whois
Registrar Dynadot, LLC
Network
Country United StatesUnited States
ASN AS14618
TLS Cert YE2
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Network / ASN Amazon.com, Inc.

Tracked from 2026-09-29 17:25 UTC  ·  Last refreshed 2026-10-02 15:30 UTC