Security Scan Report: poleznoye.icu

Redirected to:
http://poleznoye.icu/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 10 HTTP transactions. The main domain is poleznoye.icu and was registered 1 year ago.

Submitted URL: https://poleznoye.icu/

Effective URL:
http://poleznoye.icu/
Redirected

AI Security Verdict

High Risk

Confidence: 74%

7
Risk Score

Unranked .icu domain reported as phishing, hosting a 'breach scan' that harvests email addresses using fabricated breach statistics and urgency, then funnels users to a protection offer. No password fields, but avoid submitting data.

Risk Factors (6)
Single-source threat-intel match reporting the primary domain as phishing
Collects visitor email addresses under a 'free scan' pretext with no identifiable operator
Fabricated/unverifiable breach statistics and urgency cues to induce users to submit data
Funnel to a third-party 'Get Free Protection' offer after the scan, typical of lead-generation harvesting
Unranked domain with no business identity, contact details or ownership disclosure
IDS alerts for suspicious .icu domain in DNS and TLS SNI
Domain age information unavailable

Details

Page Title

poleznoye.icu - Domain Security Report | Status & Breach Check

Scan Type

public

Domain Name Analysis

The domain 'poleznoye.icu' uses the .icu top-level domain without a subdomain. Count 9 characters in 'poleznoye' split between 4 vowels and five consonants. Breaking it apart gives 3 words: pole, z, noye. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://poleznoye.icu/

Page Load Overview

2.81s
Total Load Time
313 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:615 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: static
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4162.220.208.138West Valley City, Utah, United States
AS30247Voonami, Inc.
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
104--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10AD2D89B6AA30025741794B837A7B3567274E003C50FCD287EDD528CCF84AD9AAE779C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:a2t14+oIEwUH1vtABUROikxy3YXCIweZikNl3rQ8PAl1YCe8DKbavDW1mQ75C0PE:uIoOzXDWrPVnuqu1+fyPmHgGVla/jq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28471:C6QZaVUAErNIAKJukBACA0UEDSBYyhCIJ3CEHICCIgAKB10IOABJsBoLSEArOIgESAJDgYJhpRVQM9HoACQmkQQGWCAzIEfO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:18183c3c38180000
Perceptual Hash:c8d96c6666333366
Difference Hash:3032f8f8a0e0d0ea
Wavelet Hash:38187c7c3e3e0f07
Color Hash:#79d2a9

Other Hashes

Crop Resistant:3032f8f8a0e0d0ea

Scan History

Scan history not available

Unable to load historical scan data