Security Scan Report: goo.su

Site favicon
Submitted: Jan 18, 2026, 7:48:22 AMCompleted: Jan 18, 2026, 7:50:03 AMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 10 domains to perform 71 HTTP transactions. The main domain is goo.su.

Submitted URL: https://goo.su

The Cisco Umbrella rank of the primary domain is #377,454 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

9
Risk Score

Site contains hidden/ disguised password fields on an unknown, low‑rank domain – high‑risk phishing.

Risk Factors
Credential harvesting form with disguised password inputs
Hidden password field
Unicode character mixing (evasion technique)
Password field without username/email field
Multiple redirects (6) indicating possible redirect abuse
Domain age information unavailable

Details

Page Title

goo.su

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(84%)

Domain Information

The domain name 'goo.su' uses the .su country-code top-level domain and has no subdomain. The second-level label 'goo' is 3 characters long split between two vowels and one consonant. Breaking it apart gives one word: goo. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://goo.su

Page Load Overview

5.13s
Total Load Time
71
HTTP Requests
10
Domains
4.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:714 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software84% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
84%
documentation technical
65%
adult content
56%
phishing scam
29%
government public service
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
71185.43.4.171Russia
AS29182JSC IOT
711--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T155048F77329A063986558498E05B830D9F20B143F506C9BC79BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:UfQho9PKBb9Js3q9Jzbs6tlg3SBKwdQWgceIszp2bMy8OldW:HhoC9JSqzzbs6o3Sj3gcrsV2eAw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:187080:kLCHMIBYRQCQOCJ40Njgi2gkQAIRwjGCBoQThyLABEJAAAjERxXAEA+1DAAkG2lgiUSkBEvgCCLhDySAoQoBIXDEUCA4yTVQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc7c7c3d3ffffff
Perceptual Hash:b1339acccc939365
Difference Hash:0018181616000000
Wavelet Hash:3c1c0404003c3c3c
Color Hash:#4c2d86

Other Hashes

Crop Resistant:0018181616000000

Scan History

Scan history not available

Unable to load historical scan data