Google account phishing site google-verify-portal.com flagged by threat-intel account and blocklist
@TheThreatWire posted a phishing alert on X on 2 November 2026 for google-verify-portal.com, a copy of the Google sign-in page that is not a Google domain.
- First reported
- Reports
- 1
Source: x.com · published
What happened
Threat-intel account @TheThreatWire posted a phishing alert on X on 2 November 2026 for hxxps://google-verify-portal.com/. The post lists the impersonated organisation as Google LLC, with Google account authentication among the services imitated. It is not a Google domain. Real Google account sign-in and verification take place at accounts.google.com.
How the scam works
The screenshot in the post shows a copy of the Google sign-in page: the Google logo, the heading “Sign in”, the line “Use your Google Account”, an “Email or phone” box, “Forgot email?” and “Create account” links, and a blue “Next” button. A footer has language and Help, Privacy and Terms links.
The page matches the real Google login and so it is hard to tell apart by sight. What gives it away is the web address. google-verify-portal.com only puts Google's name inside a domain of its own, and the words “verify” and “portal” sound official while meaning nothing. Phishing sites like this are normally reached through emails or messages claiming that an account has been suspended, a sign-in was blocked or a document has been shared. The first screen collects the email address, then the next steps ask for the password and any verification code, and the scammers use these at once on the real site.
A stolen Google account can unlock email, cloud files, photos, saved passwords and accounts that use Google to sign in. The post gives no information about who runs the site or how people are being sent to it. A password manager helps because it will not fill a Google password on an address that is not Google's.
Source
@TheThreatWire on X, Phishing Alert #88 of 2 November 2026 (text and screenshot). Not independently verified by scammers.com.
Red flags
- A Google sign-in page on google-verify-portal.com rather than accounts.google.com.
- A domain that adds words like “verify” and “portal” to Google's name.
- An email or message claiming your account is suspended or needs verification.
- A page that asks for a password and a verification code after the email address.
- A password manager that refuses to fill your Google password on the page.
If you were targeted
- 1Do not enter your email, password or codes on google-verify-portal.com.
- 2If you did, change your Google password at once from a clean device and sign out of all sessions.
- 3Check Google Security Checkup for devices, recovery details and forwarding rules you did not set.
- 4Turn on 2-Step Verification, ideally with a passkey or security key.
- 5Report the phishing message to Google and delete it.