mail.googlenewsgh.com

Google

https://mail.googlenewsgh.com Access site

Screenshot

No screenshot available yet Captured automatically on the next refresh cycle

Investigate

Domain mail.googlenewsgh.com3 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 50.6.160.247

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://mail.googlenewsgh.com

urlscan

Wayback

archive.today

Cert YR1

crt.sh

Censys

Google CT

Phishunt analysis Beta

36 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.5 Brand in title
+3.7 Brand in domain label
+1.7 Shared IP cluster
+1.4 ASN reputation
+1.1 Cert reuse
+1.1 No CSP header
+1.1 No HSTS header
+0.9 Young certificate
+0.7 Brand in cert SAN
+0.7 Unrecognised DNS provider
+0.6 Final host mismatch
+0.6 Login text in screenshot
+0.6 Registrar reputation
+0.4 Long domain
+0.3 Free CA
+0.2 Suspicious TLD
+0.1 External scripts
+0.1 Deep subdomain

24 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Mail subdomain on a Google-branded lookalike domain, flagged by Google Safe Browsing for social engineering. The page title uses Google branding and the final host differs from the requested one; it shares an IP and a cluster with a sibling domain, suggesting a webmail credential phish.

Google Safe BrowsingBrand in domain labelFinal host mismatch

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-08 · confidence 70%

Domain & Network

Whois

Registrar Launchpad.com Inc.

Network

IP 50.6.160.247

Country