Security Scan Report: api.gospotcheck.com

Redirected to: https://idp.gospotcheck.com/login?state=hKFo2SBHczIxQ1NzT2xEMExKRzRCQTFfMmtjc2YwODVoZDhxMKFupWxvZ2luo3RpZNkgTFV4bGVWUVMzOVhSWWNUNzJFYnZPSjZEekppR2hGSXijY2lk2SBzeUNSeWtuWDRKUEhIQW5uTmI2Tkh5Z3hxaGJWOVpFTg&client=syCRyknX4JPHHAnnNb6NHygxqhbV9ZEN&protocol=oauth2&audience=urn%3Acom%3Agospotcheck&leeway=60&nonce=92c5b3d67dd4792e6851893a244bd2f3&redirect_uri=https%3A%2F%2Fapi.gospotcheck.com%2Fauth%2Fauth0%2Fcallback&response_type=code&scope=openid%20profile%20email%20gsc.internal%20offline_access

Site favicon
Submitted: Jan 14, 2026, 10:08:47 PMCompleted: Jan 14, 2026, 10:10:09 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 2 countries across 6 domains to perform 1 HTTP transaction. The main domain is idp.gospotcheck.com and was registered NaN years ago.

Submitted URL: https://api.gospotcheck.com

Effective URL: https://idp.gospotcheck.com/login?state=hKFo2SBHczIxQ1NzT2xEMExKRzRCQTFfMmtjc2YwODVoZDhxMKFupWxvZ2luo3RpZNkgTFV4bGVWUVMzOVhSWWNUNzJFYnZPSjZEekppR2hGSXijY2lk2SBzeUNSeWtuWDRKUEhIQW5uTmI2Tkh5Z3hxaGJWOVpFTg&client=syCRyknX4JPHHAnnNb6NHygxqhbV9ZEN&protocol=oauth2&audience=urn%3Acom%3Agospotcheck&leeway=60&nonce=92c5b3d67dd4792e6851893a244bd2f3&redirect_uri=https%3A%2F%2Fapi.gospotcheck.com%2Fauth%2Fauth0%2Fcallback&response_type=code&scope=openid%20profile%20email%20gsc.internal%20offline_accessRedirected

The Cisco Umbrella rank of the primary domain is #228,599 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Site hosts a credential‑stealing login form and links to a known malicious domain; treat as confirmed phishing scam.

Risk Factors
Credential harvesting login form (email + password)
External malicious Indicators of Compromise link to whatismybrowser.com
Low ranking in Cisco Umbrella for a brand‑like site
Multiple redirects before reaching the login page
Domain age information unavailable

Details

Page Title

GoSpotCheck

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

technology software

(61%)

Domain Information

The domain 'api.gospotcheck.com' uses the commercial generic top-level domain (.com) and includes subdomain 'api'. The core label 'gospotcheck' covers 11 characters holding 3 vowels versus 8 consonants. Tokenizing the label suggests three words: go, spot, check. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://api.gospotcheck.com

Page Load Overview

2.29s
Total Load Time
13
HTTP Requests
6
Domains
55 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
Text Length:460 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software61% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
61%
documentation technical
32%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5216.58.206.35United States
AS15169GOOGLE
2104.18.37.18United States
AS13335CLOUDFLARENET
213.33.223.41New York, New York, United States
AS16509AMAZON-02
2146.75.121.91Frankfurt am Main, Hesse, Germany
AS54113FASTLY
2142.250.184.202United States
AS15169GOOGLE
135--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11124F9220B36A2599B192D24CEFB61C8700CE4D2450B7FBAF08ED7D4D75E27C7897A58

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:8tLPcFdzM7pS8kCVFT/hNvxtAv1sZUwwZLv9B9FG:GczzwpqCVRhNDA2ZjYf8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:215846:pgIIOaCgFJ0AAoBRDKK0nECiacYoRIC42ZQCEcGg4Q4EogQWAEECiRXABXUIVyGU2HNBBvY1VExhEHBAwWk6oQQAIzpEbLCB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7dfe7e7ffe7ffe7
Perceptual Hash:b3339989666666cc
Difference Hash:4c324d4c3008100c
Wavelet Hash:e0f8c0c027371303
Color Hash:#a187c5

Other Hashes

Crop Resistant:4c324d4c3008100c

Scan History

Scan history not available

Unable to load historical scan data