google-amp-2u3.pages.dev

Google

https://google-amp-2u3.pages.dev Access site

Screenshot

Investigate

Domain google-amp-2u3.pages.dev1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

IP 188.114.96.3

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://google-amp-2u3.pages.dev

urlscan

Wayback

archive.today

Cert Let's Encrypt

crt.sh

Censys

Google CT

Phishunt analysis Beta

29 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+3.7 Brand in domain label
+3.4 Shared IP cluster
+1.1 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Brand in cert SAN
+0.6 Suspicious TLD
+0.5 Young certificate
+0.5 Long domain
+0.3 Free CA
+0.2 Hyphens
+0.1 External scripts
+0.1 Deep subdomain

19 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Impersonates Google using a Cloudflare Pages free-tier host with a misleading name containing the Google brand. The certificate SAN includes the brand name, and the site has been flagged malicious by urlscan. Likely used to harvest credentials or redirect victims.

urlscan.ioBrand in domain labelBrand in cert SAN

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-27 · confidence 65%

Domain & Network

Whois

Registrar CloudFlare, Inc.

Network

IP 188.114.96.3

Country