Security Report: win.flachs.it - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1d44041d-cefa-4f2a-b375-e8ff594e6f59 Domain and IP registration (RDAP)/api/v1/rdap/1d44041d-cefa-4f2a-b375-e8ff594e6f59How often this domain was scanned/api/v1/domain/stats/win.flachs.it Scan history for this domain/api/v1/domain/history/win.flachs.it?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is flachs.it and was registered 9 years ago.

Submitted URL: http://win.flachs.it/opt-out/6ivxnu19654hYCa818gfgipmpnxj77TAHGLASVIDPVAIT269049PLOQ3267g5

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Email-only 'unsubscribe' form on an old domain with a title naming a different site (drewfowler.com) and a random token URL. No credential or payment fields, no malware or threat-intel hits — suspicious but unconfirmed.

Risk Factors (3)

Title/manifested site name (drewfowler.com) does not match the domain actually serving the page (flachs.it)

Randomized token URL not linked to any identifiable newsletter or organisation

Email address collection under an unsubscribe pretext with no operator identity disclosed

Safety Factors (6)

Domain is 3460 days old (registered 2017-05-13) — well-established registration age

No password, payment, or disguised credential fields present

No Indicators of Compromise, no hunting rule/JavaScript malware, no IDS alerts, no known-kit match

All JavaScript served from the site's own domain; external reference limited to code.jquery.com

No cross-origin credential handling or exfiltration detected

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 4

Domain age information unavailable

Details

Page Title

Unsubscribe - drewfowler.com

Scan Type

public

Domain Name Analysis

Within the Italian country-code top-level domain (.it), 'win.flachs.it' is registered and includes subdomain 'win'. The registrable portion 'flachs' spans 6 characters containing 1 vowel alongside 5 consonants. Word splitting yields 2 words: flac, hs. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.47s

Total Load Time

35 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:169 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	84.252.101.181	Moscow, Moscow, Russia	AS213220Delta Ltd
2	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
4	2	-	-

Detected Technologies2

JQueryv3.6.0

100%

jQuery CDN

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19D41FE1A3CF510C0525372B86EEB8A0438209A1B7E06994934DC82A9DFD4F2DDCA3ACC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:n8xQkHr+jkMYRResBEHXvr+yV6svCZKrC:nUQkL+PYXhe/KygSCQrC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2439:iABEAAAAAAABAQgACAAIQgAEIAIQgAABCCAgCCAAECKACAAMAACgAAAAAEEAMgAAAAgCAJiEADABiIAAAAAAAgYkABAAEIQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00182424243c0000

Perceptual Hash:932c2c93b36cccb3

Difference Hash:0020444868681400

Wavelet Hash:03033f27273f0f0f

Color Hash:#d2cc79

Other Hashes

Crop Resistant:0020444868681400

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: win.flachs.it