Security Scan Report: l.gotourl.es

Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 3 countries across 15 domains to perform 37 HTTP transactions. The main domain is gotourl.es.

Submitted URL: https://l.gotourl.es/l/ba568a1df34d7b9e61c73160d8a32565f59c8c7d

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Link-shortener hop whose destination is flagged by Google Safe Browsing as a suspected phishing/forgery page. The interstitial itself is harmless, but do not click through.

Risk Factors (3)
URL is a redirect/shortener gate to a destination carrying a Google phishing advisory
Destination brand and content are concealed from the user before the click-through
No independent, substantive content on the page (pure warning interstitial) — no way to verify the destination is benign
Safety Factors (5)
Verified DOM facts: 0 forms, 0 password fields, 0 payment fields on the scanned page itself
No Indicators of Compromise matches, no hunting rule JavaScript malware, no IDS alerts, no known-kit roster hit
Underlying host is a mainstream link-tracking service that is itself surfacing the warning rather than hiding it
No cross-origin credential exfiltration detected
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

Warning — Mailsuite

Scan Type

public

Domain Name Analysis

Domain 'l.gotourl.es' uses the Spanish country-code top-level domain (.es) with subdomain 'l'. Count 7 characters in 'gotourl' split between three vowels and four consonants. Splitting it apart reveals two words: goto, url. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://l.gotourl.es/l/ba568a1df34d7b9e61c73160d8a32565f59c8c7d

Page Load Overview

1.07s
Total Load Time
672 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:360 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1418.202.209.237Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
154.74.26.200Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
123.50.131.141Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
152.92.32.216Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
1192.178.183.97Google · CDNUnited States
AS15169Google LLC
123.45.103.56Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.19.147.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.94Google · CDNUnited States
AS15169Google LLC
3724--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F912C7D7ACE69829166391D6B470B60CA816620BED08C4D67DFD80751F85FE30D43BBD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:zvNAj716KrTWcDVtZgZrZA8YJHGpMgDhdZ5I+xIoVWcOC4yp:zv+jBVrTWcJty92aptXIATVNl4yp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9301:imQCIIAgiETAQEC2AdJShAQIQYC0FAkiG4KESsIMaIIgIiz3uGM2IgBpB0YECGkJAhEgUKooAAToBAAEYRGDkAKSSQOkrwqI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3ffffffffffff
Perceptual Hash:b1313534747476ce
Difference Hash:1616000000000000
Wavelet Hash:c3c3f3f300000000
Color Hash:N/A

Other Hashes

Crop Resistant:1616000000000000

Scan History

Scan history not available

Unable to load historical scan data