smtp-mail-googl-prod-dev-142-38-101.cloud
Appeared in the .cloud zone on Saturday, September 19, 2026; by the end of that day the census found boilerplate page. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Name mimics Google mail infrastructure ('smtp-mail-googl-prod-dev-142-38-101.cloud' with the 'googl' misspelling and fake host numbering) but serves only a GitHub Pages 404, one of 21 identical staged pages — a brand-squat with no content whose only plausible purpose is future deception/phishing infrastructure.
The domain is a Google typosquat (googl≈google) with a fabricated infrastructure name (smtp-mail-prod-dev pattern) registered at a retail registrar. The page is a GitHub Pages 404 placeholder with no deceptive content, indicating this is a parked/abandoned squat domain with no active phishing page. The 21-domain cluster and brand+registrar scoring confirm this is a brand-squat campaign, not a live phishing attack.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Saturday, September 19, 2026
Same data as JSON: /api/zone/domain/smtp-mail-googl-prod-dev-142-38-101.cloud. This page is not indexed by search engines and does not link to the site it describes.