Phishing detection: mirror-google.com
Google Investigate
Domain
mirror-google.com0 CT hosts on apex
IP
188.114.96.3
URL
https://mirror-google.com
Cert
Google Trust Services
Phishunt analysis Beta
35
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +5.1 urlscan.io
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.4 Shared IP cluster
- +1.9 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.8 Young domain
- +0.7 Brand in cert SAN
- +0.6 Registrar reputation
- +0.5 Young certificate
- +0.3 Free CA
- +0.3 Long domain
- +0.2 Suspicious TLD
- +0.1 Hyphens
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Impersonates Google via a mirroring-themed domain with the brand embedded in the TLS certificate. Google branding is visible in page screenshot content. Hosted on Cloudflare and flagged as malicious by urlscan. The domain name suggests a proxy or traffic-interception scheme.
Brand in cert SANKeyword matchurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 62%
Domain & Network
Whois
Registrar
NameSilo, LLC
Network
IP
188.114.96.3
Country
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Google Trust Services
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise