Security Scan Report: xn--d1a.rest-icone.rent

Redirected to:
https://out.petal-art.de/
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is rest-icone.rent and was registered 1 month ago.

Submitted URL: https://xn--d1a.rest-icone.rent/drYlXqTy/

Effective URL:
https://out.petal-art.de/
Redirected

AI Security Verdict

Low Risk

Confidence: 65%

2
Risk Score

An unsubscribe page with a single email field; no credential/payment fields, no brand impersonation and no threat-intel, YARA or IDS hits. The IDN-to-second-domain redirect is unusual but benign-looking. Low risk.

Risk Factors (3)
Entry URL uses a punycode IDN hostname (xn--d1a.rest-icone.rent) that redirects to an unrelated registrable domain
Form submits cross-origin to out.petal-art.de; the operator of the form backend is not the domain shown in the address bar
No threat-intel, ranking or reputational data available for the final domain (out.petal-art.de)
Safety Factors (5)
No password, card or disguised credential fields anywhere on the page
No JavaScript behavioral signals, no obfuscation, no credential exfiltration; all scripts same-origin
No Indicators of Compromise, YARA, IDS or Safe Browsing hits
Collects only an email address for the stated purpose of unsubscribing, with consistent visible, button and form-field labeling
No brand name, logo or login UI belonging to another organisation
Domain age information unavailable

Details

Page Title

Unsubscribe

Scan Type

public

Domain Name Analysis

The domain name 'xn--d1a.rest-icone.rent' uses the .rent top-level domain, featuring subdomain 'xn--d1a'. The core label 'rest-icone' covers 10 characters containing four vowels alongside five consonants, along with one hyphen. Segmentation suggests three words: rest, i, cone. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--d1a.rest-icone.rent/drYlXqTy/

Page Load Overview

0.76s
Total Load Time
44 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:23 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
262.173.140.6Russia
AS34300Internet-Cosmos LLC
2146.190.240.53Toronto, Ontario, Canada
AS14061DigitalOcean, LLC
42--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A501285148035523D197B2FC77CE2B82CDD05CE993AC4109139332EEA9D9FBC9B86780

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kxC6NZk6QclfhtBqmRS6t3a51u1u1u1u1u1u1u15FfiGCivMVj3GWyplGoS:k0Iksp6mSUUUUUUU5MGC7jo2oS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:752:AAAIIQAAAAAAAQAggAAAAAAEAAAgAAACAAAAwAAAAAAAAAAAAAAAAAAAAAABACAAAAAAAAAAEAAAEAIAgAAAAAAAQAABAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7ffffffffff
Perceptual Hash:e6669999998c6666
Difference Hash:00080c0000000000
Wavelet Hash:ffffe7ff00000000
Color Hash:#d25c2d

Other Hashes

Crop Resistant:00080c0000000000

Scan History

Scan history not available

Unable to load historical scan data