Security Scan Report: goo.su

Redirected to:
https://flyn.co/tGILyb
Site favicon
Submitted: Completed: publiccompleted
This website contacted 107 IPs in 9 countries across 66 domains to perform 160 HTTP transactions. The main domain is goo.su and was registered 7 years ago.

Submitted URL: https://goo.su/uwBxndx

Effective URL:
https://flyn.co/tGILyb
Redirected

The Cisco Umbrella rank of the primary domain is #377,454 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Bare Russian redirect interstitial reached via a 40-hop cross-domain shortener chain ending on a different domain. No forms, no credential harvesting and no brand impersonation; the threat-intel hit is single-source abuse-reputation on the entry shortener only. Treat the eventual destination as unverified.

Risk Factors (4)
Opaque multi-hop redirect chain (40 hops, 33 cross-domain) across unrelated domains with no visible destination disclosure
Browser fingerprinting scripts (FingerprintJS via openfpcdn.io) observed on the redirect path
Ad-network and tracking domains in the redirect/external resource set (hybrid.ai, adriver.ru, ad.mail.ru, betweendigital, digitalcaramel, gpm-ssp)
Page provides no identifiable operator, content or purpose beyond forwarding the visitor elsewhere
Safety Factors (5)
Verified form facts: 0 forms, 0 password fields, 0 disguised password fields, 0 payment fields — no credential or payment harvesting
No brand impersonation: the page presents no brand of another entity
No JavaScript malware or hunting-rule pattern matches; no high-precision native-hunting-rule hits; kit roster clean
No cross-origin credential exfiltration and no cross-origin form submissions detected
All JavaScript served from the site's own domain; no third-party script hosts
Domain age information unavailable

Details

Page Title

Происходит перенаправление

Scan Type

public

Domain Name Analysis

You're looking at domain 'goo.su' on the .su country-code top-level domain. The core label 'goo' covers 3 characters holding 2 vowels versus one consonant. Tokenizing the label suggests one word: goo. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://goo.su/uwBxndx

Page Load Overview

6.05s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:78 chars
Detector Agreement:67%

Website Classification

Primary Category

news media journalism47% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
47%
real estate property
39%
healthcare medical
39%
government public service
34%
cryptocurrency blockchain
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5482.202.170.126Russia
AS29182JSC IOT
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
113.32.99.103Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
1142.251.13.155Google · CDNUnited States
AS15169Google LLC
165.109.72.77Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
1142.251.20.97Google · CDNUnited States
AS15169Google LLC
187.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
190.156.233.120Russia
AS47764LLC VK
188.212.201.204Moscow, Moscow, Russia
AS39134Edinaya Set Limited Liability Company
160107--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A903E762EF5120288253805EF4E0AA8D5135E107FB77487AB3CC672A5BCEAD74A573DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:v4nnuhAHvFhmOmjROmvTOmt0xmrmGmXmP8AmOgGmOimmOmXmcPZM3I21OxQRaOHk:Q/RmcBM3bUQRHz2RWww8G6gzZS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40690:IKIjEIiqFQByJ4hEUFYEF5JIQyAVLlShkYQsBiUhG8CTIiUBwSAGiiBko5DUkBfgIAAEgIBDoEIC1wAW1ScCtMyQGaAtKDYk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefeeee6e6feff
Perceptual Hash:d5dd887722dc8833
Difference Hash:000000080c080000
Wavelet Hash:0e0e0e0e22323e3e
Color Hash:#cad22d

Other Hashes

Crop Resistant:000000080c080000

Scan History

Scan history not available

Unable to load historical scan data