ScanMalware.com

Security Scan Report: plusone.google.com

Redirected to:
https://shohag.shop/cgi-sys/suspendedpage.cgi
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9453a0c6-3141-4491-bab9-7a35d53b365cDomain and IP registration (RDAP)/api/v1/rdap/9453a0c6-3141-4491-bab9-7a35d53b365cHow often this domain was scanned/api/v1/domain/stats/plusone.google.comScan history for this domain/api/v1/domain/history/plusone.google.com?limit=15
This website contacted 8 IPs in 2 countries across 4 domains to perform 8 HTTP transactions. The main domain is google.com and was registered 29 years ago.

Submitted URL: https://plusone.google.com/url?q=https://google.com/goto?url=CAESTwHrOzAVYLp8p1XZJG3imToMgFa2CMsN28j3zx0_-j3EdY33VVKjQUcnZf9qOdQe3ATzWIGnW_C5okF3IO9Iefgr6ax7lDYxIGREg-umcSY

Effective URL:
https://shohag.shop/cgi-sys/suspendedpage.cgi
Redirected

The Cisco Umbrella rank of the primary domain is #1 of the top 1 million websitesTop 100 Site

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Redirect chain ends on an unrelated domain showing only a generic 'Account Suspended' hosting page. No forms, no brand impersonation, no malware or threat-intel hits — minimal risk, but the destination is defunct and untrustworthy.

Risk Factors (2)
Destination domain shohag.shop hosts a suspended/disabled account — no genuine content is served, indicating an abandoned or de-provisioned host
Open redirect from google.com to an unrelated third-party domain, a pattern also used to launder links
Safety Factors (4)
No credential, login, or payment fields present
No brand impersonation — the page presents no other entity's branding
No Indicators of Compromise, no malware/YARA hits, no network IDS alerts
All JavaScript served same-origin with no cross-origin credential exfiltration
Domain age information unavailable

Details

Page Title

Account Suspended

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'plusone.google.com' is registered and includes subdomain 'plusone'. The core label 'google' covers 6 characters holding three vowels versus three consonants. Word splitting yields 1 word: google. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://plusone.google.com/url?q=https://google.com/goto?url=CAESTwHrOzAVYLp8p1XZJG3imToMgFa2CMsN28j3zx0_-j3EdY33VVKjQUcnZf9qOdQe3ATzWIGnW_C5okF3IO9Iefgr6ax7lDYxIGREg-umcSY

Page Load Overview

1.41s
Total Load Time
56 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Text Length:120 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content40% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
40%
finance banking
36%
news media journalism
33%
cryptocurrency blockchain
27%
government public service
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1103.29.181.99Bangladesh
AS147303ColoCone
1142.251.127.102Google · CDNUnited States
AS15169Google LLC
1142.250.154.138Google · CDNUnited States
AS15169Google LLC
1142.251.154.119Google · CDNUnited States
AS15169Google LLC
1172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.250.154.101Google · CDNUnited States
AS15169Google LLC
1142.251.151.119Google · CDNUnited States
AS15169Google LLC
1104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
88--

Detected Technologies2

HTTP/3
40%
Google Web Server
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ABF1F9AB2AF3000B740712A87ABE3206AB59A503911ACD607F0DF6E9CF879C0CD5375D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:elVZHCkA26xd3Q4JRveuTtMy47R/Ga0kVhFuPwf8Pn9wHHyJqh:KJvVGaRF8I8O

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7595:QJEEBK4IkhZAg0MMZGsAjpkCA0fYAkYQwGGA3wDgBwCgAFIDAQaKYA1AF0AiMoGAkADULMYQEAEiAB7cXVUIiATXGMiUABgo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000ffffffffff
Perceptual Hash:e767878e989c3c18
Difference Hash:7848003000000000
Wavelet Hash:070000cf0f0f0f0f
Color Hash:#61d22d

Other Hashes

Crop Resistant:6060606028584020,0000000000000000,48c860c810202020

Scan History

Scan history not available

Unable to load historical scan data