accounts-google.rsgremote.com

Google

https://accounts-google.rsgremote.com Access site

Screenshot

Investigate

Domain accounts-google.rsgremote.com10 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 35.176.151.88

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://accounts-google.rsgremote.com

urlscan

Wayback

archive.today

Cert YE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

45 high suspicion likely_phishingheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.1 Brand in screenshot
+3.2 Brand favicon
+3.2 Young domain
+2.6 Brand in subdomain
+2.4 ASN reputation
+2.2 Country mismatch
+1.6 Favicon (kit)
+1.1 No CSP header
+0.9 No registrar lock
+0.8 Brand + login token
+0.7 Brand in cert SAN
+0.6 Long domain
+0.6 Login text in screenshot
+0.5 Young certificate
+0.3 Free CA
+0.2 Suspicious TLD
+0.1 Hyphens
+0.1 Deep subdomain
Boosted to 45: Google-flagged credential form

25 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Fake Google accounts login page using a combosquatted subdomain on an unrelated domain, with a certificate naming the brand. Flagged by Google Safe Browsing for social engineering. Likely steals Google credentials. Hosted on Amazon infrastructure in the UK.

Brand in subdomainGoogle Safe BrowsingBrand in cert SAN

AI-generated from stored detector signals - the AI never visited the site. · 2026-11-05 · confidence 90%

Domain & Network

Whois

Registrar GoDaddy.com, LLC

Network

IP 35.176.151.88 AWS EC2

Country