www.google.com

Classification: Whitelisted

www.google.com is a whitelisted (trusted) hostname. Reported by 11 threat sources, last seen 2026-09-03.

Current activity

  • Offline β€” no longer resolving. Last online 2026-09-03 08:04:36.
  • Malware distribution β€” This indicator is distributing malware.
  • Phishing β€” Hosts a phishing site and is intrinsically malicious.

MITRE ATT&CK associations

Malware families: AZORULT (S0344) COBALT STRIKE (S0154) WANNACRY (S0366) BAD RABBIT (S0606)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Paperless Post phishing Maltiverse 2026-08-29 08:02:04 2026-09-03 08:04:11 malicious-activity phishing T1566 Phishing
Canva phishing Maltiverse 2026-08-07 08:08:15 2026-09-02 08:02:00 malicious-activity phishing T1566 Phishing
Phishing Phishtank 2017-10-15 18:00:49 2026-09-02 02:35:12 compromised malicious-activity phishing
Badrabbit Triage 2026-02-07 10:00:54 2026-08-30 00:25:16 malicious-activity S0606 Bad Rabbit
Foot Locker phishing Maltiverse 2026-04-30 01:03:12 2026-08-25 08:02:10 malicious-activity phishing T1566 Phishing
Matched whitelist source: Misp_google_domain Maltiverse 2026-06-29 14:55:00 2026-08-24 14:00:15 benign
Hijackloader Triage 2026-08-11 21:40:17 2026-08-11 21:40:17 malicious-activity
Booking phishing Maltiverse 2026-07-30 10:01:26 2026-07-30 10:01:26 malicious-activity phishing T1566 Phishing
WhatsApp phishing Maltiverse 2026-07-28 10:02:36 2026-07-28 10:02:36 malicious-activity phishing T1566 Phishing
Suspicious URL Triage 2026-07-25 04:25:01 2026-07-27 20:21:13 anomalous-activity
Meta phishing Maltiverse 2026-07-22 10:01:40 2026-07-22 10:01:40 malicious-activity phishing T1566 Phishing
Cerber Triage 2026-07-18 03:25:02 2026-07-18 03:25:02 malicious-activity
Killmbr Triage 2026-03-10 20:35:44 2026-07-03 14:43:31 malicious-activity
PostFinance phishing Maltiverse 2026-06-30 10:03:05 2026-06-30 10:03:05 malicious-activity phishing T1566 Phishing
Malware Download URLhaus Abuse.ch 2024-11-12 06:19:14 2026-06-29 12:52:10 malicious-activity malware
Azorult Triage 2026-06-14 12:36:45 2026-06-14 12:36:45 malicious-activity S0344 Azorult
Google Domain Maltiverse 2024-03-20 16:48:10 2026-05-31 03:05:23
Malicious URL Triage 2026-02-05 02:23:21 2026-04-21 02:58:36 malicious-activity
Top Popularity Site Cisco Umbrella 2022-07-18 20:31:19 2026-03-26 09:24:47 benign
McAfee phishing Maltiverse 2026-03-06 01:01:38 2026-03-09 01:04:59 malicious-activity T1566 Phishing
Wannacry Triage 2026-03-01 17:26:34 2026-03-01 17:26:34 malicious-activity S0366 WannaCry
Dharma Triage 2026-02-25 12:09:37 2026-02-25 12:09:37 malicious-activity
email admin phishing Maltiverse 2025-10-22 17:21:15 2026-02-18 01:04:22 compromised malicious-activity T1566 Phishing
okta phishing Maltiverse 2026-02-10 01:03:51 2026-02-13 01:14:55 malicious-activity T1566 Phishing
ap phishing Maltiverse 2025-12-19 20:08:34 2025-12-19 20:08:34 malicious-activity T1566 Phishing
Instagram phishing Maltiverse 2025-12-18 20:49:18 2025-12-18 20:49:18 malicious-activity T1566 Phishing
docusign phishing Maltiverse 2025-11-13 05:02:18 2025-11-13 05:02:18 malicious-activity T1566 Phishing
microsoft phishing Maltiverse 2025-11-05 02:47:45 2025-11-05 02:47:45 malicious-activity T1566 Phishing
Ricardo phishing Maltiverse 2025-10-28 16:59:06 2025-11-02 23:40:13 malicious-activity T1566 Phishing
Phishing Microsoft Phishtank 2025-10-08 12:37:18 2025-10-08 12:37:18 compromised malicious-activity
Phishing Internal Revenue Service Phishtank 2018-04-11 21:28:22 2025-10-03 14:57:46 compromised malicious-activity
Phishing Google Phishtank 2025-10-03 14:32:10 2025-10-03 14:33:26 compromised malicious-activity
Phishing Steam Phishtank 2025-10-03 13:53:15 2025-10-03 13:54:08 compromised malicious-activity
Phishing Amazon.com Phishtank 2025-10-03 11:57:08 2025-10-03 12:50:58 compromised malicious-activity
Phishing Visa Phishtank 2025-10-03 12:22:31 2025-10-03 12:22:42 compromised malicious-activity
Malicious URL Hybrid-Analysis 2023-05-25 12:25:57 2024-02-02 18:45:04
Safe Site Maltiverse 2024-01-08 15:29:41 2024-01-08 15:29:41
Phishing Antiphishing.com.ar 2023-04-05 11:04:28 2023-12-22 12:38:42 malicious-activity T1566 Phishing
Azorult ThreatFox Abuse.ch 2023-09-27 22:49:51 2023-09-27 22:49:51 malicious-activity S0344 Azorult
Cobalt Strike ThreatFox Abuse.ch 2022-12-15 17:13:19 2022-12-15 17:20:17 malicious-activity S0154 Cobalt Strike
Safe Site Cisco Umbrella 2022-07-14 23:25:06 2022-07-16 01:15:06 benign
Phishing JPMorgan Chase and Co. Phishtank 2022-03-19 13:20:46 2022-04-19 09:22:37 compromised malicious-activity
Phishing Mr.Looquer 2019-07-16 02:44:36 2022-01-08 01:49:22
Safe Maltiverse Research Team 2020-07-07 08:03:38 2021-09-23 18:20:37
Phishing eBay, Inc. Phishtank 2018-05-14 17:04:08 2021-01-31 11:49:10 compromised malicious-activity
Malware Download Abuse.ch 2021-01-05 17:15:33 2021-01-05 17:15:33 malicious-activity
Phishing Indeed Maltiverse Research Team 2020-12-24 21:17:29 2020-12-24 21:17:29 malicious-activity
Malicious url Maltiverse Research Team 2019-06-16 08:35:34 2020-08-03 12:17:06
Phishing PayPal Phishtank 2017-12-28 16:52:06 2020-06-08 10:33:02
PAYPAL phishing Antiphishing.com.ar 2019-10-03 01:33:06 2020-04-07 02:23:20
target unspecified phishing Antiphishing.com.ar 2019-05-13 08:11:06 2020-04-07 02:23:06
paypal phishing Antiphishing.com.ar 2019-10-03 01:30:44 2019-10-03 01:33:08
Phishing Wells Fargo Phishtank 2017-10-15 16:16:23 2019-07-04 02:27:54
Phishing Netflix Phishtank 2018-05-20 20:15:29 2018-08-09 09:09:23
Phishing Bank of America Corporation Phishtank 2018-08-06 09:08:15 2018-08-06 09:08:15
Phishing Royal Bank of Scotland Phishtank 2018-05-14 17:04:11 2018-05-14 17:04:11
Phishing Facebook Phishtank 2018-04-15 16:41:41 2018-04-15 16:41:41
Phishing RuneScape Phishtank 2018-04-15 16:07:49 2018-04-15 16:07:49

Tags

azorult c2 historicalandnew puffstealer rultazo phishing asn-quadranet-global cobaltstrike agentemis beacon cobeacon fraud social engineering covid19 consumer credential phishing corporate credential phishing doc 07nov2024esm defense_evasion discovery persistence privilege_escalation spyware stealer trojan adware badrabbit mimikatz evasion execution impact ransomware upx android macos dharma credential_access antivm linux wannacry exploit worm bootkit installer killmbr wiper crimsonrat danabot darkcomet modiloader rms guest1111 agilenet banker infostealer lateral_movement rat cerber hijackloader loader floxif spysheriff backdoor

IP addresses resolved by this hostname

Whois information

AS name
AS15169 Google LLC
Domain
google.com
TLD
com
DNSSEC
['unsigned']
Nameservers
NS1.GOOGLE.COM, NS2.GOOGLE.COM, NS3.GOOGLE.COM, NS4.GOOGLE.COM, ns2.google.com, ns1.google.com, ns4.google.com, ns3.google.com
Registrant
MarkMonitor, Inc.
City
Mountain View
State
CA
Country
US β€” United States πŸ‡ΊπŸ‡Έ
Contact email
[email protected], [email protected]
Domain created
1997-09-15 04:00:00
Domain expires
2028-09-14 04:00:00
First indexed
2017-10-15 16:16:23
Last updated
2026-09-03 08:04:36