Security Scan Report: xn--ooge-9wa5r.com

Redirected to:
https://images-gooqle.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 4 domains to perform 10 HTTP transactions. The main domain is xn--ooge-9wa5r.com and was registered 1 year 3 months ago.

Submitted URL: https://xn--ooge-9wa5r.com

Effective URL:
https://images-gooqle.com/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Homograph punycode domain redirecting to the typosquat images-gooqle.com, which brands itself 'Google'. Classic brand-impersonation infrastructure; no credential form seen on this page, but the pattern is deceptive and should be avoided.

Risk Factors (5)
Typosquatted domain (images-gooqle.com) impersonating Google on infrastructure Google does not control
Punycode homograph entry domain used to disguise the destination
Cross-domain redirect from the homograph host to the typosquat host
Final domain absent from Cisco Umbrella top 1M reputation data
Off-platform application backend (onrender.com) inconsistent with a Google-branded page
Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Domain Name Analysis

You're looking at domain 'xn--ooge-9wa5r.com' on the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'xn--ooge-9wa5r' stretches across 14 characters containing four vowels alongside five consonants, notching two digits and three hyphens. It segments into 7 words: xn, oo, ge, 9, wa, 5, r. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--ooge-9wa5r.com

Page Load Overview

3.65s
Total Load Time
234 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:8 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.212.161Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.46.242Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1216.24.57.18United States
AS397273Render
1142.251.151.119Google · CDNUnited States
AS15169Google LLC
1104.21.53.118Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.143.48Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.156.119Google · CDNUnited States
AS15169Google LLC
107--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17482018B6AA31556BC13A5792FEB674A2335E003C545DC6C3ECC624CCF463EC99A27D8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:bgvDthJ9dHVXLPMdNuHBfwN7GpcqmlTw37wbUQ2Ztz6xb7Raf6Ri16rfX9R9VE02:bg7th3mN8of2Fau

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17767:oR9gSo0BoM0jNsgjCswFPYwKAohxSJBIUgESsKIGQAA0UB5hCmIU1yAAWWJBgAZQuAFIFUCksEsPAIYYAgDfTGwQYwSQAFoI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data