Phishing detection: linkedin-answer.pages.dev
LinkedIn Investigate
Domain
linkedin-answer.pages.dev1 CT host on apex
IP
188.114.96.3
URL
https://linkedin-answer.pages.dev
Cert
-
Phishunt analysis Beta
38
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.7 Brand in domain label
- +3.4 Shared IP cluster
- +1.6 Young domain
- +1.1 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.6 Suspicious TLD
- +0.5 Long domain
- +0.1 Hyphens
- +0.1 External scripts
- +0.1 Deep subdomain
20 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates LinkedIn on a Cloudflare Pages free-hosting subdomain with the brand embedded directly in the apex label and page title. Google Safe Browsing flags it as social engineering. The page likely harvests LinkedIn account credentials from users misled by the domain structure.
Brand in domain labelGoogle Safe BrowsingKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-10 · confidence 85%
Domain & Network
Whois
Registrar
CloudFlare, Inc.
Network
IP
188.114.96.3
Country
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
-
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise