Security Scan Report: goo.gl

Redirected to:
https://sites.google.com/view/revert-change
Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 1 country across 13 domains to perform 41 HTTP transactions. The main domain is goo.gl and was registered 21 years ago.

Submitted URL: https://goo.gl/0667

Effective URL:
https://sites.google.com/view/revert-change
Redirected

The Cisco Umbrella rank of the primary domain is #12,903 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Analyst-vetted fake reCAPTCHA gate on Google Sites that impersonates Google's security check and forwards visitors, via a token, to a Google sign-in phishing page; reached through a days-old throwaway domain. Do not interact.

Risk Factors (6)
Known malicious phishing kit identified by name (fake reCAPTCHA gate to Google sign-in phishing)
Counterfeit CAPTCHA check that no reCAPTCHA script or frame ever rendered
Entry link funneled through a 7-day-old throwaway domain (twittertussle.com) before landing on Google Sites
DevTools/right-click/source blocking to hinder inspection
Inline JavaScript performing encoding/decoding and redirect hand-off
Impersonation of Google's security-verification branding on a page its author does not control branding for
Domain age information unavailable

Details

Page Title

Revert apps

Scan Type

public

Domain Name Analysis

Within the Greenlandic country-code top-level domain (.gl), 'goo.gl' is registered without a subdomain. The core label 'goo' covers 3 characters holding two vowels versus one consonant. Segmentation suggests one word: goo. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://goo.gl/0667

Page Load Overview

3.16s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:122 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software56% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
56%
documentation technical
39%
corporate
25%

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19192.178.183.101Google · CDNUnited States
AS15169Google LLC
1142.251.14.100Google · CDNUnited States
AS15169Google LLC
1104.21.26.159Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1142.251.20.94Google · CDNUnited States
AS15169Google LLC
1142.251.110.141Google · CDNUnited States
AS15169Google LLC
1142.251.13.101Google · CDNUnited States
AS15169Google LLC
1192.178.183.138Google · CDNUnited States
AS15169Google LLC
1142.251.153.7Google · CDNUnited States
AS15169Google LLC
1142.251.14.102Google · CDNUnited States
AS15169Google LLC
4123--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T142A32B56B3012CBADAD714E6201B910E33FE10BB940596B4E2FAD8D52FECC99D02677D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:LW0xz/jVkuJf0xz/jV9tfC8B46yjnRAWm6s7YXf+thk9gjdLVre:Mkq46yCWm7+fDgU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:99722:I5jbgCmi2lEFkpkogUICKt7MQ8HR4qMgIVhAkYFAkMAckAQBCWKCgJDgMEBUEUsAAREiK8xiDg4UlwFyADAjDCMycwCEPnT4

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfc3c3dfffffffe7
Perceptual Hash:b83830c6c6c7c7c7
Difference Hash:309e16100000008c
Wavelet Hash:3c000c0cffffff00
Color Hash:#bfb240

Other Hashes

Crop Resistant:309e16100000008c

Scan History

Scan history not available

Unable to load historical scan data