Phishing detection: pay-google.net
Google Screenshot
Screenshot captured by urlscan.io on 2026-10-21T22:57 UTC: our own render of this page came back blank.
Investigate
Domain
pay-google.net16 CT hosts on apex
urlscan
VirusTotal
Whois
IP
172.236.104.157
ipinfo
Greynoise
URL
https://pay-google.net
Phishunt analysis Beta
25
low suspicionheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +3.2 ASN reputation
- +1.7 Shared IP cluster
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.7 Unrecognised DNS provider
- +0.6 Registrar reputation
- +0.3 Long domain
- +0.2 Suspicious TLD
- +0.1 Hyphens
14 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Lookalike domain impersonating Google Pay, flagged by Google Safe Browsing for social engineering. Likely harvests payment or account credentials. Hosted on Akamai Connected Cloud, an ASN with elevated abuse reputation; no security headers.
Google Safe BrowsingKeyword matchASN reputation
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-22 · confidence 75%
Domain & Network
Whois
Registrar
Hosting Concepts B.V. d/b/a Registrar.eu
Network
IP
172.236.104.157 Akamai Linode
Country
United States
United States
Hosting
Akamai Connected Cloud
ASN
AS63949
TLS Cert
-
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists