Security Scan Report: www.xn--linkein-ko3c.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 32 HTTP transactions. The main domain is xn--linkein-ko3c.com and was registered 4 months ago.

Submitted URL: https://www.xn--linkein-ko3c.com

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Punycode typosquat (xn--linkein-ko3c.com) cloning LinkedIn's sign-in page and branding on a non-LinkedIn domain, funnelling users to a local /login step. Classic brand-impersonation phishing lure.

Risk Factors (4)
Typosquatted/punycode domain impersonating LinkedIn on a non-official domain
Verbatim copy of LinkedIn login page, branding, meta description and footer text
Login funnel ('Sign in with email', OAuth buttons) hosted on the look-alike domain
Unranked domain with very low business-legitimacy signals (<5 months old)
Domain age information unavailable

Details

Page Title

LinkedIn: Log In or Sign Up

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.xn--linkein-ko3c.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'www'. Count 16 characters in 'xn--linkein-ko3c' containing 4 vowels alongside 8 consonants, notching one digit and three hyphens. Tokenizing the label suggests 6 words: xn, linke, in, ko, 3, c. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

i - a = ( si i # bal o ign in Linked fj Articles people Learning — Jobs — Games — Gettheapp (‘9M In y Welcome to your professional community G Continue with Google = Continue with Microsoft “4 PO...

Page Load Overview

3.67s
Total Load Time
208 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:934 chars
Detector Agreement:80%

Website Classification

Primary Category

social media network53% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
53%
documentation technical
36%
education learning
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8216.198.79.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
8104.18.33.206Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8172.64.154.50Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
864.29.17.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
324--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16CA285362810DA1BA9974BAE7034FF7A95CC9A6BC363ED5CF1FC85062751DB30B44642

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BPTYnjUZ/u9mUvQMf1ojN46Zbl6grYw8y04SUGBcV:BPTYnjUZ/uQOQMf1ojN46tl6grtG8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21708:BsmBogKiBop4IgAnkACAJPABJAPBKWISMNSECgApuoJofEGAS0IKrAGRrVREUkAJjDIBEIbmkmSSA0UBZEyS2UxIbDAFAFDg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcf93c3f3dfd3c3
Perceptual Hash:ec2c93d3666c29c9
Difference Hash:2b323627a62a262e
Wavelet Hash:fb8b9381d3c38383
Color Hash:07201000180

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data