Summary
API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2fe980ec-ca5f-4115-bb3d-d260fe17a969Domain and IP registration (RDAP)/api/v1/rdap/2fe980ec-ca5f-4115-bb3d-d260fe17a969How often this domain was scanned/api/v1/domain/stats/ihefono.topScan history for this domain/api/v1/domain/history/ihefono.top?limit=15This website contacted 53 IPs in 5 countries across 53 domains to perform 152 HTTP transactions. The main domain is ihefono.top and was registered 1 year ago.
Submitted URL: https://ihefono.top
Effective URL: Redirected
https://headlinelogic.com/?d=ihefono.top&pcid=112&a=false&uuid=88c9dd9...
AI Security Verdict
Moderate Risk
Confidence: 78%
5
Risk Score
HeadlineLogic page shows a news template but also an expired-domain notice and ParkLogic footer while collecting login/signup passwords on a redirected .top host. Avoid entering credentials.
Risk Factors (5)
Credential-collecting login/signup forms on a page that states the domain has expired and appears to be a parked-domain monetization template.
Cross-domain redirect from ihefono.top with tracking/brand parameters to headlinelogic.com, with the entry .top host triggering multiple HIGH network IDS alerts for likely hostile traffic.
Deceptive mismatch between the 'HeadlineLogic News Portal' branding/fake news content and the expired-domain notice plus ParkLogic domain-monetization footer.
Password fields are present in the DOM and scanner flagged password fields not visible in the screenshot, warranting caution around credential entry.
Low business legitimacy score and no clear ownership/contact details beyond the ParkLogic copyright notice.
Safety Factors (6)
Forms submit same-origin to headlinelogic.com; no cross-origin credential exfiltration was detected.
The page name 'HeadlineLogic' matches the final domain headlinelogic.com, so this is self-branding rather than impersonation of another entity.
No threat-intelligence Indicators of Compromise, no hunting rule malware patterns, no known malicious kit roster match, and no Safe Browsing hit.
No payment-card fields were detected; terms/privacy pages are present.
Final domain headlinelogic.com is ranked in Cisco Umbrella, unlike the entry .top redirector.
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable
Details
Page Title
HeadlineLogic News Portal
Scan Type
public
Domain Name Analysis
Domain 'ihefono.top' uses the .top top-level domain. Its registrable label 'ihefono' stretches across 7 characters containing 4 vowels alongside three consonants. Splitting it apart reveals 4 words: i, he, f, ono. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.
Screenshot
Page Load Overview
1.21s
Total Load Time
2.6 MB
Total Size
Language Analysis
Primary Language
🇺🇸English
Code: enConfidence:80%
Script:Latin
Direction:ltr
Detection Details
HTML Lang Attribute:en
Text Length:2,915 chars
Detector Agreement:100%
All Detected Languages
🇺🇸en(97%)🇩🇰da(3%)
Website Classification
Primary Category
social_media50% confidence
Type: spa
Method: structural
All Detected Categories
social_media
50%
Detected Features
Login Form
Domain & IP Information
| Requests | IP Address | Location | AS Autonomous System |
|---|---|---|---|
| 47 | 172.236.96.118 | Chicago, Illinois, United States | AS63949Akamai Connected Cloud |
| 21 | 52.57.221.121Aws · CLOUD | Frankfurt am Main, Hesse, Germany | AS16509Amazon.com, Inc. |
| 8 | 188.114.97.3Cloudflare · WAF | United States | AS13335Cloudflare, Inc. |
| 7 | 104.21.42.32Cloudflare · WAF | United States | AS13335Cloudflare, Inc. |
| 3 | 151.101.129.155Fastly · CDN | United States | AS54113Fastly, Inc. |
| 3 | 192.178.183.154Google · CDN | United States | AS15169Google LLC |
| 2 | 162.4.84.248 | Australia | AS154653ParkLogic Pty Ltd |
| 2 | 172.234.216.100 | Chicago, Illinois, United States | AS63949Akamai Connected Cloud |
| 2 | 172.232.7.47 | Chicago, Illinois, United States | AS63949Akamai Connected Cloud |
| 2 | 151.101.1.155Fastly · CDN | United States | AS54113Fastly, Inc. |
| 152 | 53 | - | - |
Detected Technologies14
Content Similarity HashesFor malware variant detection
TLSH (Trend Micro Locality Sensitive Hash)
Security-focused
Specialized for malware detection and similarity analysis
T16393A92054F846F75163A0D4BAB39A0ABF50D50BDA828954BADC5F909F83E83DD331DE
ssdeep (Context Triggered Piecewise Hashing)
Context-aware
Detects similar content even with modifications
768:QqtfhAc2fzTNgQwEFWqLdCgq6fcp70YuPOgawm2POA:QqfxuXNgQXFWqLdDq6fcSHPOSm2POA
sdhash (Similarity Digest Hashing)
High-precisionHigh-precision similarity detection for forensic analysis
sdhash:3:94422:AsIDECBABNETSCS8yCK+hrriPAoAFNVgChUEARYkiRBAIAZSsCAjgYQxIkt3BALdw/EGMJneFBEEJyAhygzCNZEgeJVFZDmV
These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.
Image Hashes
Perceptual Hashes
Average Hash:00ff81818181fdff
Perceptual Hash:bf35c027137a6c16
Difference Hash:940f351b5f676171
Wavelet Hash:00ff81898181fdff
Color Hash:07400000010
Scan History
Scan history not available
Unable to load historical scan data