Medium riskfirst seen 2 h ago
test-google-login.pages.dev
56of 100
Credential phishing, aimed at general public. 91% likely a scam.
Why it was flagged
How the score works- Name and certificate
- Registration and DNS
- VAKYN verdict
- "test-google-login" contains brand keyword "google", lure "login" (common-word brand)+25
- lure words: login+15
- same IP hosts 14 other flagged domain(s)+10
- user content on pages.dev+3
- 2 hyphens+3
Evidence
Registration
- not checked
Hosting
- Country
- United States
- Network
- CLOUDFLARENET
- IP
- 172.66.45.48
DNS
- A
- 172.66.45.48, 172.66.46.208
- NS
- meg.ns.cloudflare.com, watson.ns.cloudflare.com
- MX
- none
Certificate
- Issuer
- Let's Encrypt
- Names
- 2
- Seen
- 30 Oct 2026 08:40 UTC
VAKYN verdict
370 msEight questions about the site, each with how sure the answer is.
Likely used for phishing or a scam?
yes91% sure
- yes91%
- no9%
How dangerous for an ordinary visitor?
Probably malicious55% sure
- Probably malicious55%
- Clearly malicious41%
- Unclear3%
What is it most likely for?
credential phishing69% sure
- credential phishing69%
- legitimate11%
- unclear6%
Which brand does it pretend to be?
Google80% sure
- google80%
- none20%
Who is it aimed at?
general public54% sure
- general public54%
- developers24%
- employees9%
Would it ask visitors to sign in?
yes90% sure
- yes90%
- no10%
Would it ask visitors to pay?
no75% sure
- yes25%
- no75%
Plausible innocent explanation?
no56% sure
- yes44%
- no56%