Phishing detection: mail.google.com.drive.pratham.vincacybertechltd.myshn.net

Google
https://mail.google.com.drive.pratham.vincacybertechltd.myshn.net Access site
Screenshot
Screenshot of mail.google.com.drive.pratham.vincacybertechltd.myshn.net
Investigate
Domain mail.google.com.drive.pratham.vincacybertechltd.myshn.net6308 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 3.232.92.128
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://mail.google.com.drive.pratham.vincacybertechltd.mys…
urlscan Wayback archive.today
Cert GlobalSign nv-sa
crt.sh Censys Google CT
Phishunt analysis Beta
20 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 urlscan.io
  • +3.0 Site cluster
  • +2.6 Brand in subdomain
  • +1.4 ASN reputation
  • +0.7 Brand in cert SAN
  • +0.6 Long domain
  • +0.6 Final host mismatch
  • +0.6 Deep subdomain
  • +0.2 Suspicious TLD
13 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Site spoofs Gmail by embedding the legitimate Gmail hostname as a subdomain of an unrelated domain. A redirect chain leads to a final host mismatch, forming part of a cluster of Google-themed phishing infrastructure confirmed malicious by URLScan.

Brand in subdomainDeep subdomainurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-24 · confidence 77%
Domain & Network
Whois
Registrar CSC Corporate Domains, Inc.
Network
IP 3.232.92.128
Country United StatesUnited States
Hosting Amazon.com, Inc.
ASN AS14618
TLS Cert GlobalSign nv-sa
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Campaign
This detection belongs to possible campaign 8024d41f5c84 (4 members total)
Related infrastructure Betasuspected links from shared infrastructure, not attribution
appengine.google.com.drive.pratham.vincacybertechltd.myshn.net 53 same nameservers same redirect target similar name same registrar appeared together (24h) same TLS cert
active 2026-04-06
docs.google.com.drive.pratham.vincacybertechltd.myshn.net 53 same nameservers same redirect target similar name same registrar appeared together (24h) same TLS cert
active 2026-04-06
sites.google.com.drive.pratham.vincacybertechltd.myshn.net 53 same nameservers same redirect target similar name same registrar appeared together (24h) same TLS cert
active 2026-04-06
Top 3 of 3 related · rebuilt daily · corr-1.2.0 · related infrastructure API
Report this phishing
Network / ASN Amazon.com, Inc.
abuse@amazonaws.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-04-06 00:17 UTC  ·  Last refreshed 2026-08-31 09:30 UTC