Security Scan Report: googleplayvs.com

Redirected to:
https://www.googleplayvs.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 9 domains to perform 89 HTTP transactions. The main domain is googleplayvs.com and was registered 1 year 10 months ago.

Submitted URL: https://googleplayvs.com/

Effective URL:
https://www.googleplayvs.com/
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Fake Google Play Store page on googleplayvs.com using Google Play branding and a bogus 'Play Protect' badge to push the 555OK gambling app with fabricated reviews. No login/payment forms, but do not trust or download from it.

Risk Factors (4)
Impersonation of Google Play branding and UI on a non-Google domain
False 'Verified by Play Protect' trust badge
Fabricated review counts and testimonials promoting a gambling/money-making app
Unranked analytics host metrics.oks999.vip and unranked WebSocket target sock2.source-cdn.com embedded in the page
Domain age information unavailable

Details

Page Title

GooglePlay

Scan Type

public

Domain Name Analysis

The domain name 'googleplayvs.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'googleplayvs' spans 12 characters with four vowels and 8 consonants. Tokenizing the label suggests 3 words: google, play, vs. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Top * B Google Play Games Apps = Movies Books ~—Kids Developer 5550K Juegos Rapidos 5550K Juegos Rapidos Tecnologia S.A.S. Colombia © Verified by Play Protect 485% 2 million 71 K+ reviews Downloads...

Page Load Overview

4.20s
Total Load Time
5.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,429 chars
Detector Agreement:67%

Website Classification

Primary Category

entertainment media98% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media
98%
technology software
93%
download file sharing
62%
cryptocurrency blockchain
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17104.21.32.141Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
9157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
9172.66.1.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.67.152.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.127.94Google · CDNUnited States
AS15169Google LLC
899--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17373A43281C21177AA13CAE4743163ED30C3478EE892865487FD47F4A7FADE8EA5D589

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:YZAkWGOnqsLC83c589jNfM0leeJehA0QpLOcStCaTbTMTVTkTfAbHaTbTMTVTkTI:jqsjW0QeJePrCCWfMvR7gRaxpRGWRhWl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:76242:zbRHaoiiACTpgmeDkMVlAGABJRAwBSEEeqSpGNADEyoA2WAFAIjCKrBOBQgyEAQAGMIYURpCwJhoz9ARZgBI0g/nBCnL6QHg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe9f9ff878787ff
Perceptual Hash:bbc9c837c49435c6
Difference Hash:2b1b63600e1f0d2c
Wavelet Hash:7d81999f83838787
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data