Phishing detection: twd-da.ext.g0ogle.com

Google
https://twd-da.ext.g0ogle.com Access site
Screenshot
Screenshot of twd-da.ext.g0ogle.com

Screenshot captured by urlscan.io on 2026-11-03T15:29 UTC: our own render of this page came back blank.

Investigate
Domain twd-da.ext.g0ogle.com69 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 162.4.84.215
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://twd-da.ext.g0ogle.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
30 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +3.7 Google Safe Browsing
  • +3.5 ASN reputation
  • +3.4 Shared IP cluster
  • +2.6 Brand typo
  • +2.2 Country mismatch
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.7 Unrecognised DNS provider
  • +0.4 Long domain
  • +0.3 Deep subdomain
  • +0.2 Suspicious TLD
  • +0.1 Hyphens
16 signals fired · detector v3.0.0
AI analysis AIBeta
Parked or staging

Deep subdomain of a Google typosquat (g0ogle with a zero) hosted on a parking provider in Australia, in an IP cluster with other suspicious hosts. Appears to be a typosquat or parked page used for brand abuse; no clear credential form was confirmed.

Brand typoASN reputationShared IP cluster
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-03 · confidence 50%
Domain & Network
Whois
Registrar GoDaddy.com, LLC
Network
IP 162.4.84.215
Country AustraliaAustralia
Hosting ParkLogic Pty Ltd
ASN AS154653
TLS Cert -
External detection Google Safe Browsing
GSB category: UNWANTED_SOFTWARE
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Registrar GoDaddy.com, LLC
abuse@godaddy.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-11-03 17:20 UTC  ·  Last refreshed 2026-11-06 17:30 UTC