Security Scan Report: goog1e.co

Redirected to:
https://gg0.us/
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 4 domains to perform 71 HTTP transactions. The main domain is goog1e.co and was registered 3 years 4 months ago.

Submitted URL: https://goog1e.co/

Effective URL:
https://gg0.us/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 80%

5
Risk Score

Typosquatted goog1e.co redirects to gg0.us, which mimics Google search settings and collects names/birth dates, then POSTs to an actor-abused Vercel endpoint. Avoid interaction.

Risk Factors (5)
Deceptive typosquatted entry domain redirecting to an unrelated final domain
Non-Google domain displaying Google-style search settings interface
Collection of personal identity details (name and birth date) with no legitimate business context
Cross-origin POST to a dynamic endpoint on actor-abused Vercel hosting
IDS alerts for an abused cloud hosting service
Safety Factors (5)
No password, payment, or disguised credential fields detected
No threat-intel Indicators of Compromise matches against the page or loaded resources
No hunting rule malware patterns or known malicious kit-roster matches
Scanner did not detect credential exfiltration
Established domain (2797 days old) with no strong malicious indicators — risk clamped from 8 to 5
Domain age information unavailable

Details

Page Title

page

Scan Type

public

Domain Name Analysis

The domain 'goog1e.co' uses the Colombian country-code top-level domain (.co) without a subdomain. Its registrable label 'goog1e' stretches across 6 characters split between three vowels and two consonants, notching 1 digit. It segments into 4 words: go, og, 1, e. The median word length lands at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

ALL IMAGES >

Page Load Overview

2.32s
Total Load Time
79 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:59%
Script:Latin
Direction:ltr

Detection Details

Text Length:353 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping92% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
92%
technology software
47%
corporate business
27%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15216.239.34.21Google · CDNUnited States
AS15169Google LLC
854.215.31.113Aws · CLOUDSan Jose, California, United States
AS16509Amazon.com, Inc.
8216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
8188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8216.239.36.21Google · CDNUnited States
AS15169Google LLC
8216.239.32.21Google · CDNUnited States
AS15169Google LLC
8216.239.38.21Google · CDNUnited States
AS15169Google LLC
8188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
718--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19953E625F8F33236293BB07CABEF62497272940B9408C958791D17809F14D59D8EFBAD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:T67qF7ud9v9e5kkc/JESWv/JMjOQdwwlDbmYT3Go:m7qVyVwm/Jdu/JMxwjYj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:63622:ZCSIAqNaRZJBluI2grMhAwFGARCFEVEuBEAAQGJoCALIIFpGDhN8SGx6B4IZBZAEgMEDIAiJPMBLEgVihQIEoizAPCBPIQYC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7efefefefefefefe
Perceptual Hash:d555aa55aa552a55
Difference Hash:8000000000000000
Wavelet Hash:4ececece0e0e0e0e
Color Hash:N/A

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data