Security Scan Report: goldman-sach-jp.win

Redirected to:
https://goldman-sach-jp.win/#/pages/user/login/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 2 domains to perform 37 HTTP transactions. The main domain is goldman-sach-jp.win and was registered 1 week ago.

Submitted URL: https://goldman-sach-jp.win/

Effective URL:
https://goldman-sach-jp.win/#/pages/user/login/login
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Goldman Sachs login page on a 12-day-old, unranked .win domain harvesting usernames and passwords; classic brand-impersonation phishing.

Risk Factors (5)
Brand impersonation of Goldman Sachs on a domain that is not goldmansachs.com
Credential-harvesting login form on a brand-mismatched domain
Very new domain (12 days) registered to an unrelated .win TLD
No domain reputation or ranking; no verifiable corporate identity
Circular redirect / hash-route login page consistent with a phishing kit
Domain age information unavailable

Details

Page Title

Login

Scan Type

public

Domain Name Analysis

Within the .win top-level domain, 'goldman-sach-jp.win' is registered and has no subdomain. Count 15 characters in 'goldman-sach-jp' holding 3 vowels versus ten consonants, along with 2 hyphens. Word splitting yields four words: goldman, s, ach, jp. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://goldman-sach-jp.win/

Page Load Overview

6.20s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:137 chars
Detector Agreement:100%

Website Classification

Primary Category

social media30% confidence
Type: dynamic
Method: structural

All Detected Categories

social media
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9124.174.94.0China
AS137718Beijing Volcano Engine Technology Co., Ltd.
9188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9124.174.83.217China
AS137718Beijing Volcano Engine Technology Co., Ltd.
374--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E323A5B5780C15BABB7BD382B653DF2E3844BA22C0D20F58F25F1A598FD91B12875748

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:ecJhsOAvl3iNlCcKdGXGuG6ZNhu+/6SU6L6TzhBeC3D:eChbAvl3iNlCcKs2dqhuRTzhBeC3D

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:46454:JgAQBjoNEVA4BECKBIECIhpGQJFBQwmX/0JUCEYhAMDQpBNSBWwNpE0FIgEw6TEUoJTwc1EDAFIAqA1EiAIgECCAHAnDhFwQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffffff0000
Perceptual Hash:abd52ad57e09806e
Difference Hash:d228d2ca50a85355
Wavelet Hash:fe7e7e3e3e1c0000
Color Hash:#74862d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data