High riskfirst seen 2 h ago
myaccount.googledocu.com
70of 100
Credential phishing, aimed at general public. 98% likely a scam.
Why it was flagged
How the score works- Name and certificate
- Registration and DNS
- VAKYN verdict
- "googledocu" ≈ "googledocs", edit distance 1, lure "account"+26
- registered 6 days ago+26
- no mail servers, AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud, same IP hosts 38 other flagged domain(s)+14
- lure words: account (in subdomain)+3
- .com abuse prior−2
- registered for the minimum one year+2
- certificate covers only this name+1
Evidence
Registration
- Age
- 6 days old
- Registrar
- Sav.com, LLC
- Status
- clientTransferProhibited
Hosting
- Country
- Singapore
- Network
- AKAMAI-LINODE-AP Akamai Connected Cloud
- IP
- 172.234.212.77
DNS
- A
- 172.234.212.77, 172.236.103.15
- NS
- ns1-coming-soon.sav.com, ns2-coming-soon.sav.com
- MX
- none
Certificate
- Issuer
- Let's Encrypt
- Names
- 1
- Seen
- 30 Oct 2026 08:08 UTC
VAKYN verdict
491 msEight questions about the site, each with how sure the answer is.
Likely used for phishing or a scam?
yes98% sure
- yes98%
- no2%
How dangerous for an ordinary visitor?
Clearly malicious58% sure
- Clearly malicious58%
- Probably malicious40%
- Unclear1%
What is it most likely for?
credential phishing74% sure
- credential phishing74%
- payment fraud9%
- legitimate4%
Which brand does it pretend to be?
Google76% sure
- google76%
- none24%
Who is it aimed at?
general public53% sure
- general public53%
- bank customers27%
- employees13%
Would it ask visitors to sign in?
yes88% sure
- yes88%
- no12%
Would it ask visitors to pay?
yes75% sure
- yes75%
- no25%
Plausible innocent explanation?
no99% sure
- yes1%
- no99%