Security Scan Report: google-amp.com

Submitted: Completed: publiccompleted
This website contacted 24 IPs in 2 countries across 22 domains to perform 25 HTTP transactions. The main domain is google-amp.com and was registered 2 years 1 month ago.

Submitted URL: https://google-amp.com/

AI Security Verdict

Low Risk

Confidence: 62%

3
Risk Score

Broken Cloudflare error page on an unranked domain whose name borrows 'Google'; no content, forms or threat hits, so no active scam is present despite the suspicious name.

Risk Factors (2)
Domain name incorporates the 'Google' trademark while not being an official Google domain (possible brand-squatting acquisition)
Site is broken/misconfigured (Cloudflare CNAME cross-user ban), so its intended purpose cannot be verified
Safety Factors (4)
No credential or payment collection of any kind
No IoC, malware or phishing indicators in any scanner
Domain age of about two years with no abuse history recorded
External network target is only Cloudflare's own analytics endpoint
Domain age information unavailable

Details

Page Title

CNAME Cross-User Banned | Cloudflare

Scan Type

public

Domain Name Analysis

Domain 'google-amp.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'google-amp' stretches across 10 characters split between 4 vowels and five consonants, notching one hyphen. Splitting it apart reveals two words: google, amp. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://google-amp.com/

Page Load Overview

0.43s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:955 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical44% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
44%
technology software
38%
cryptocurrency blockchain
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.18.7.53Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.6.53Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.30.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
192.223.124.62Frankfurt am Main, Hesse, Germany
AS199524G-Core Labs S.A.
1185.111.111.155Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
164.185.181.238United States
AS40009BitGravity, Inc.
1185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1193.108.153.155Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2524--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CB12A473F1F565290043C36676B9BF2D7926A01B9BB108D57E5E42726F8EF82E902348

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:lBOa/Paarl2hzXzPVUfPfTxVG9XnM3CeNwAqAdFYwpsCYkssTS6sIszs+:aa/iI2pVsfeXnM3Ce3A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9889:dzYoASIBNVgSIByawAlAMAkqWYgIiFkEiFoABCQkECagIBBya5sdIAGAUJC5BgEAoSBiVcgpSMtMUCZEKq+wJEAyNIwR0GAe

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7cfcfcfcfcfe7ff
Perceptual Hash:b838c76618679b39
Difference Hash:1c3c183818180e14
Wavelet Hash:838f0f078787033f
Color Hash:N/A

Other Hashes

Crop Resistant:1c3c183818180e14

Scan History

Scan history not available

Unable to load historical scan data