Security Report: update.mvd.5031update.www.dev.we.update.15-204-228-33.plesk.page - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/00e0f682-5145-4bba-9567-c73db9cafd5e Domain and IP registration (RDAP)/api/v1/rdap/00e0f682-5145-4bba-9567-c73db9cafd5eHow often this domain was scanned/api/v1/domain/stats/update.mvd.5031update.www.dev.we.update.15-204-228-33.plesk.page Scan history for this domain/api/v1/domain/history/update.mvd.5031update.www.dev.we.update.15-204-228-33.plesk.page?limit=15

This website contacted 6 IPs in 1 country across 5 domains to perform 28 HTTP transactions. The main domain is plesk.page and was registered 6 years ago.

Submitted URL: https://update.mvd.5031update.www.dev.we.update.15-204-228-33.plesk.page/

AI Security Verdict

Low Risk

Confidence: 68%

Risk Score

Unrelated plesk.page subdomain presents itself as IXL Learning (title, og:site_name, meta) with keyword-stuffed education copy; no credential form found, but clear brand impersonation on an untrusted host.

Risk Factors (4)

Impersonation of a different entity's brand (IXL Learning) on a domain that is not IXL's official domain

Unranked domain (not in Cisco Umbrella top 1M) while claiming a major education brand

Hosted on a shared instant-subdomain platform (plesk.page) with an opaque, machine-generated hostname

Garbled/obfuscated characters and keyword-stuffed body content inconsistent with a genuine IXL page

Safety Factors (6)

No password, disguised-password or payment fields (verified form facts: 0/0/0)

No Indicators of Compromise or threat-intelligence matches

No JavaScript malware (YARA) patterns and no malicious kit roster hits

No network IDS alerts and no cross-origin credential exfiltration

Cross-origin traffic limited to standard Google Analytics endpoints

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 7 to 3

Domain age information unavailable

Details

Page Title

IXL | Math, Language Arts, Science, Social Studies, and Spanish

Scan Type

public

Domain Name Analysis

The domain name 'update.mvd.5031update.www.dev.we.update.15-204-228-33.plesk.page' uses the .page top-level domain; it also runs on subdomain 'update.mvd.5031update.www.dev.we.update.15-204-228-33'. Its registrable label 'plesk' stretches across 5 characters holding 1 vowel versus 4 consonants. Breaking it apart gives two words: pl, esk. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.26s

Total Load Time

434 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:8,326 chars

Detector Agreement:100%

Website Classification

Primary Category

education learning97% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

education learning

97%

adult content

50%

government public service

44%

documentation technical

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	15.204.228.33	Reston, Virginia, United States	AS16276OVH SAS
4	142.251.14.97Google · CDN	United States	AS15169Google LLC
4	192.178.183.95Google · CDN	United States	AS15169Google LLC
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
4	216.239.32.36Google · CDN	United States	AS15169Google LLC
4	216.239.34.36Google · CDN	United States	AS15169Google LLC
28	6	-	-