Security Scan Report: xn--goog-31a2736b.com

Redirected to:
https://www.xn--goog-31a2736b.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 1 country across 6 domains to perform 11 HTTP transactions. The main domain is xn--goog-31a2736b.com and was registered 4 months ago.

Submitted URL: https://xn--goog-31a2736b.com

Effective URL:
https://www.xn--goog-31a2736b.com/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Punycode lookalike of google hosting a cloned Google search page: clear brand impersonation. No credential or payment form observed, but the deceptive hostname makes it unsafe to trust or enter any data.

Risk Factors (4)
Deceptive IDN/Punycode hostname imitating the Google brand
Explicit claim to be Google (title and meta) on a mismatched, unranked domain
Cloned Google search interface used as a lure surface
Recent registration (132 days) with no established reputation
Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Domain Name Analysis

The domain 'xn--goog-31a2736b.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'xn--goog-31a2736b' stretches across 17 characters containing three vowels alongside 5 consonants, plus 6 digits and three hyphens. Word splitting yields 7 words: xn, go, og, 31, a, 2736, b. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

TOUS IMAGES a Google Q Ta célébrité Recherches populaires 7 mort port treboul 4 motogp qatar 7 tusée sonde sylex plus belle la vie morgane ” offres black friday black friday iphone 17 pro max...

Page Load Overview

1.10s
Total Load Time
177 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:353 chars
Detector Agreement:50%

Website Classification

Primary Category

corporate business69% confidence
Type: static
Method: ml+structural

All Detected Categories

corporate business
69%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.150.1.129Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1216.198.79.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.127.95Google · CDNUnited States
AS15169Google LLC
1142.251.153.119Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
1142.251.155.120Google · CDNUnited States
AS15169Google LLC
1216.150.16.129Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1142.251.151.119Google · CDNUnited States
AS15169Google LLC
1142.251.154.120Google · CDNUnited States
AS15169Google LLC
1142.251.157.119Google · CDNUnited States
AS15169Google LLC
1110--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10B63296AA1F3063A5A6381692FEF63053676E043D505DE283E8D43448F85FE89CE77D8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:F7Q4YQQigQIqqZUo4u//xcZUo4u//xde/Jo3cscUEAAlcw7ZfDLsxMqI:EqxuXCqxuXy/JZDLsxMqI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:69305:liRxCJCIk4I6iJISEOIwNYF2tEoMaAFOQBIxjxSdAMNEHAAL1ICQAqRCQATC6BUYgUkGklgqhixN5BAAHbcHcRAlBACAIWgC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:eee7efefefef0000
Perceptual Hash:f1d544d55555d154
Difference Hash:8a0c14181c184c0c
Wavelet Hash:66e7c3cfcfcf0000
Color Hash:N/A

Other Hashes

Crop Resistant:8a0c14181c184c0c

Scan History

Scan history not available

Unable to load historical scan data