Security Scan Report: goooqle-buissiness.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 1 country across 11 domains to perform 18 HTTP transactions. The main domain is goooqle-buissiness.com and was registered 1 month ago.

Submitted URL: https://goooqle-buissiness.com/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Analyst-vetted Google sign-in phishing kit (TopCayXanh operator) plus a Safe Browsing social-engineering hit on a Google look-alike domain, fronted by a decoy newsletter page.

Risk Factors (6)
CRITICAL phishing YARA rule matched (roster-anchored): TopCayXanh_Operator_Default_Site
Known malicious kit family identified: topcayxanh-google-signin-operator-2026-10
Google Safe Browsing Social Engineering detection
Deceptive hostname impersonating the Google brand on an unrelated domain
New (36-day-old), unranked domain with mismatched title and decoy content
Cross-origin email submission to a third-party form endpoint
Domain age information unavailable

Details

Page Title

Top Cay Xanh

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'goooqle-buissiness.com' is registered. The second-level label 'goooqle-buissiness' is 18 characters long containing 8 vowels alongside 9 consonants; bonus characters include 1 hyphen. It segments into seven words: go, oo, q, le, buis, sines, s. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://goooqle-buissiness.com/

Page Load Overview

1.17s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:587 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: static
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5172.67.136.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.94.130Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1104.17.63.238Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.38.176Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.151.135.153Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
1104.19.252.91Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1814--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14D72A437A1700119322FE524E481B79A7257430BD7975BF0BAA99136EFC5EEA09233CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:CF8NG4S0OWUyF4S0bWUynOX8jMAysr3/t+BH4S0xWUyK5Hivr+5:CF8Fjbysr3/krK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17410:OaABgR0ywJk0A0BBQkI4gCeEMZrUEwXg6EA5RlkAAwMFIMKIbIhANVBoAQwMKFhtFMAYEoKL0kYCQoIg5IQhSAqBoICGMIAL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdf8b800001018ff
Perceptual Hash:ca759102f50ae55f
Difference Hash:2921232765e1e99d
Wavelet Hash:fdf8f89100003cff
Color Hash:#b7bf40

Scan History

Scan history not available

Unable to load historical scan data