Security Scan Report: gogl-google.com

Redirected to:
https://nampoxe.ru/
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is gogl-google.com and was registered 2 years ago.

Submitted URL: https://gogl-google.com/

Effective URL:
https://nampoxe.ru/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Self-branded MTProto proxy service with a same-origin login panel; no malware, phishing kit or exfiltration found. Unknown-age domain reached via a Google-lookalike redirect warrants caution.

Risk Factors (3)
Traffic arrives via gogl-google.com, a hostname crafted to look like Google, before redirecting to an unrelated domain
Credential login and admin-level user/secret management forms exist on a domain of unknown age and with no reputation ranking
Proxy/anonymity service promising logging-free, restriction-bypassing access — elevated abuse potential
Safety Factors (4)
Page presents its own brand (NamPoxe.RU) matching the final URL domain
All form submissions are same-origin to nampoxe.ru; no external exfiltration of credentials
No payment or card fields; password fields are for the site's own account/secret panel
Clean threat intelligence, JavaScript hunting rule, native hunting rule, kit roster and IDS results
Domain age information unavailable

Details

Page Title

NamPoxe.RU

Scan Type

public

Domain Name Analysis

Domain 'gogl-google.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'gogl-google' covers 11 characters containing four vowels alongside six consonants; it also includes 1 hyphen. Word splitting yields three words: go, gl, google. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

nampoxe.ru Безопасный MTProto прокси Приватный и быстрый доступ к мессенджерам через зашифрованный прокси-сервер. Без логирования, без ограничений. 9 MTProto 2.0 Протокол шифрования от Telegram....

Page Load Overview

0.97s
Total Load Time
13 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:1,803 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network82% confidence
Type: webapp
Method: ml+structural

All Detected Categories

social media network
82%
technology software
69%
blog personal website
60%
cryptocurrency blockchain
50%
government public service
41%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
291.212.166.3Astana, Astana, Kazakhstan
AS41798JSC Transtelecom
191.212.166.5Astana, Astana, Kazakhstan
AS41798JSC Transtelecom
32--

Detected Technologies3

Nginxv1.18.0
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14C031AB6311470369627B4E7B8889B9D3811A57AFE0747A4F8AC247947C3EF64A35B0C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:RpOnR4cSQhnklUfJ3X9siMi9fkAAm7485MYdA69iGd:RwnR9zdkWh99M9WvdA69iGd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40722:0QhgGUIYUkD0KcAIhAZFAFKKQ1Do4UIFwEjx0QYDKoaIBFOAklgSLpAUEBOHUAk04oyKWDiZgKIRQDK0MKQB6EEAAxwFikC0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fe00243e3e3c5d1d
Perceptual Hash:d665b1c4d8ccccd1
Difference Hash:8c4c4c6460251919
Wavelet Hash:fe02243c3c3d1d1d
Color Hash:N/A

Other Hashes

Crop Resistant:8c4c4c6460251919

Scan History

Scan history not available

Unable to load historical scan data