Phishing detection: google-baik.pages.dev

Google
https://google-baik.pages.dev Access site
Screenshot
No screenshot available yet Captured automatically on the next refresh cycle
Investigate
Domain google-baik.pages.dev1 CT host on apex
urlscan page.domain VirusTotal Whois
IP 188.114.97.3
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://google-baik.pages.dev
urlscan Wayback archive.today
Cert Google Trust Services
crt.sh Censys Google CT
Phishunt analysis Beta
28 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +5.1 urlscan.io
  • +3.7 Brand in domain label
  • +3.4 Shared IP cluster
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.7 Brand in cert SAN
  • +0.6 Suspicious TLD
  • +0.5 Young certificate
  • +0.4 Long domain
  • +0.3 Free CA
  • +0.1 Hyphens
  • +0.1 External scripts
  • +0.1 Deep subdomain
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Google on a free Cloudflare Pages subdomain with the brand embedded in the domain apex label. Flagged malicious by urlscan, the site likely targets Google account credentials and omits standard HTTP security headers.

urlscan.ioBrand in domain labelPaaS host
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-12 · confidence 72%
Domain & Network
Whois
Registrar CloudFlare, Inc.
Network
IP 188.114.97.3
Country United StatesUnited States
Hosting Cloudflare, Inc.
ASN AS13335
TLS Cert Google Trust Services
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
PaaS platform Cloudflare Pages
Web form
Registrar CloudFlare, Inc.
registrar-abuse@cloudflare.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-12 19:29 UTC  ·  Last refreshed 2026-08-23 15:30 UTC