Security Scan Report: 206.209.210.20

Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 2 countries across 7 domains to perform 93 HTTP transactions. The main domain is 206.209.210.20.

Submitted URL: http://206.209.210.20/yahoo/

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Yahoo-branded sign-in page hosted on a bare IP address that posts the entered username/email to a local PHP script — a classic credential-phishing clone. Do not enter credentials.

Risk Factors (4)
Brand impersonation of Yahoo on a non-Yahoo raw IP address
Credential collection form (username/email) submitting to a local PHP script on the IP host
Login flow cloned from Yahoo's real sign-in page, including copied meta description text
No verifiable domain, no HTTPS, no legitimate Yahoo authentication endpoint
Domain age information unavailable

Details

Page Title

Iniciar sesión | Yahoo

Scan Type

public

Domain Name Analysis

The domain name '206.209.210.20' uses an unknown top-level domain with no subdomain. The registrable portion '206.209.210.20' spans 14 characters split between 0 vowels and 0 consonants; bonus characters include 11 digits. Tokenizing the label suggests 4 words: 206, 209, 210, 20. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

yahoo! Holdings ES yahoo/finance THE #1 FINANCE DESTINATION DISCOVER WHAT'S NEW Q search o ‘AllHoldings © A Collapse Chart Fair Value > $93,069.87 Days Gain #4,142.47 (41.248) 5 Day Gain +476....

Page Load Overview

1.10s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es-ES
Text Length:690 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media83% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
83%
technology software
63%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21206.209.210.20United Kingdom
AS215674Brookplus Limited
487.248.119.252United Kingdom
AS203220Yahoo-UK Limited
4142.251.14.156Google · CDNUnited States
AS15169Google LLC
4192.178.183.156Google · CDNUnited States
AS15169Google LLC
4142.251.20.157Google · CDNUnited States
AS15169Google LLC
4142.251.110.157Google · CDNUnited States
AS15169Google LLC
4142.251.20.132Google · CDNUnited States
AS15169Google LLC
4142.251.110.149Google · CDNUnited States
AS15169Google LLC
487.248.119.251United Kingdom
AS203220Yahoo-UK Limited
4142.251.14.155Google · CDNUnited States
AS15169Google LLC
9319--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A692D872A1F285B7506F7294D161AB1BD947C30BD78E67E1B1AC06862FC4CE68C471DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:/qk2vturEKxlI4MYfDt3kPeiJ6+A7m/6NjtS02Ua1gencrot:5xlIFYLtkwy/6NJg1gencrot

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19391:IXAQVBBnC8bQAIAaQCF4CIJCRWfAcgT0uAEgWwQPjASBINBlCaEUnIYQW+ZZwtoAERuZgAFwgFHgMCAgbhaMgVEQNJDD8BAU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8f858585a5a5a1a1
Perceptual Hash:be90e5c7916dc0c6
Difference Hash:2d6d6d296969634b
Wavelet Hash:ff858d85a5a5a1a1
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data