Security Scan Report: elojume.top

Redirected to:
https://headlinelogic.com/?d=elojume.top&pcid=112&a=false&uuid=b3674f3...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 66 IPs in 7 countries across 55 domains to perform 163 HTTP transactions. The main domain is elojume.top.

Submitted URL: https://elojume.top

Effective URL:
https://headlinelogic.com/?d=elojume.top&pcid=112&a=false&uuid=b3674f3...
Redirected

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

Ad-arbitrage redirect funnel from a .top host lands on a 'news' page that asks for account passwords while declaring the domain expired and crediting a domain-parking operator; primary domain has a phishing report. Do not enter credentials.

Risk Factors (5)
Single-source phishing report on the primary domain being scanned (headlinelogic.com)
Login and signup forms with three password fields on a page that simultaneously declares the domain expired and is monetized by a domain-parking operator
18 redirects, 14 of them cross-domain, chained through ad-tech exchanges from an unrelated .top entry host
HIGH IDS alerts for DNS/HTTP to a *.top domain flagged as likely hostile
No verifiable publisher identity, staff, or editorial attribution for a page requesting account credentials
Domain age information unavailable

Details

Page Title

HeadlineLogic News Portal

Scan Type

public

Domain Name Analysis

Domain 'elojume.top' uses the .top top-level domain with no subdomain. Count 7 characters in 'elojume' with four vowels and 3 consonants. Word splitting yields three words: elo, j, ume. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

HEADLINE Ridcic New Entertainment Weather Sports Finance __—Lifestyle Health —Travel FRY Liora Fenwicke Household Uses For Chalk FRY Rowan kelveris FQ Mira Hatverin Global assessment warns of seve...

Page Load Overview

1.22s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,765 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media88% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
88%
education learning
46%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
33172.238.172.122Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2172.234.216.100Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2172.232.7.47Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2172.236.104.43Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2172.236.96.118Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
2142.251.127.156Google · CDNUnited States
AS15169Google LLC
16366--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12093BA2094F846F75163A0E4BAB3AA06BF51D50BD9828954FADC5F905F83E83DC231DE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:GXfhAc2fYTdcB3W7WqLKxCg/x0OgawcJjXY9PO0Law:G5xuIdcBcWqLQD/xyawclWPO+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:92835:hSoDCImMoJzGIogBlYEKQUpKAKBCLGA1kDVCB0C2UfAABgpxeJJGY4jIoHGTigiiQASXkEIQQAh1ICAYWAF76EURiy6ClQKU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data