Security Scan Report: uzafeho.top

Redirected to:
https://headlinelogic.com/?d=uzafeho.top&pcid=112&a=false&uuid=39a5fba...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 67 IPs in 6 countries across 59 domains to perform 171 HTTP transactions. The main domain is uzafeho.top and was registered 1 year ago.

Submitted URL: https://uzafeho.top

Effective URL:
https://headlinelogic.com/?d=uzafeho.top&pcid=112&a=false&uuid=39a5fba...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 78%

9
Risk Score

Expired, parked domain serving a fake 'HeadlineLogic News Portal' with password-capture signup forms, a single-source phishing hit, and a hostile .top redirect chain — do not enter credentials.

Risk Factors (6)
Phishing IoC on the primary domain (single-source, unverified)
Credential signup form with 3 password fields on an expired/parked domain
Hidden password fields present in DOM but not visible in screenshot
HIGH-severity IDS alerts on the hostile .top entry domain
Excessive redirect chain through advertising exchanges
Generic scraped filler 'news' content with low legitimacy score (10/100)
Domain age information unavailable

Details

Page Title

HeadlineLogic News Portal

Scan Type

public

Domain Name Analysis

Within the .top top-level domain, 'uzafeho.top' is registered while skipping any subdomain. Count 7 characters in 'uzafeho' holding four vowels versus three consonants. Tokenizing the label suggests four words: uz, a, feh, o. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

HEADLINE ®iocic New Entertainment Weather Sports Finance _—Lifestyle © Health —Travel Top Storie Ss a See the bigger picture Explore a daily news briefing, Sd FRY Adrian soimere Trump given De...

Page Load Overview

0.71s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,921 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(97%)🇩🇰da(3%)

Website Classification

Primary Category

social_media50% confidence
Type: spa
Method: structural

All Detected Categories

social_media
50%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
47172.236.96.118Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2152.57.221.121Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
8188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.199.186Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3135.125.146.82Germany
AS16276OVH SAS
2162.4.84.248Australia
AS154653ParkLogic Pty Ltd
2172.234.216.100Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2172.232.7.47Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
17167--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18193982054F846F75163A0D4BAB3AA0ABF50D50BD9828954FADC5F909F83E83DD231DE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:IeKmfhAc2fzTCplygoFWqLdCgHPOoYScz74YWawfPOQ:IeKMxuXCpEXFWqLdDHPOoYSc4nfPOQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94416:E0NAiECrIglmYw8kiJIwXgJAUB2DBAiruA3lQROhwFUWYRAiGDiBMiAPlIbTkIEAzcxGOKB0layGgBChEEUSxPYMyBAlZbAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data