Security Scan Report: stage.whm.update.2en.update.15-204-228-33.plesk.page

Submitted: Sep 27, 2026, 6:16:49 PMCompleted: Sep 27, 2026, 6:17:41 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Page copies IXL's branding and meta description on a free plesk.page shared-hosting subdomain, not ixl.com. No credential or payment form and no malware/IDS hits, so brand mismatch alone caps this at moderate risk.

Risk Factors (4)
Impersonation of a different entity's brand (IXL) on a non-official domain
Garbled/obfuscated Unicode header and button text unrelated to the claimed brand content
Hosted on a free, instantly-publishable shared-hosting namespace with unknown page age
Four Function() constructor calls in JavaScript (dynamic code generation)
Safety Factors (4)
No credential, login, or payment form present (0 password fields, 0 disguised password fields, 0 payment fields)
No Indicators of Compromise matches, no YARA malware hits, no IDS/Suricata alerts, no Safe Browsing flags
No cross-origin form submissions or credential exfiltration detected
Only benign external resources (Google Fonts, Google Analytics, Google Tag Manager)
Domain age information unavailable

Details

Page Title

IXL | Math, Language Arts, Science, Social Studies, and Spanish

Scan Type

public

Domain Name Analysis

Domain 'stage.whm.update.2en.update.15-204-228-33.plesk.page' uses the .page top-level domain; it also runs on subdomain 'stage.whm.update.2en.update.15-204-228-33'. Count 5 characters in 'plesk' holding 1 vowel versus four consonants. Splitting it apart reveals two words: pl, esk. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://stage.whm.update.2en.update.15-204-228-33.plesk.page/

Page Load Overview

1.61s
Total Load Time
543 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:8,466 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning96% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

education learning
96%
adult content
46%
government public service
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
615.204.228.33Reston, Virginia, United States
AS16276OVH SAS
6142.251.14.97Google · CDNUnited States
AS15169Google LLC
6142.251.110.95Google · CDNUnited States
AS15169Google LLC
6142.251.110.94Google · CDNUnited States
AS15169Google LLC
6216.239.34.36Google · CDNUnited States
AS15169Google LLC
305--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C4048E773296063986558498F05B43099F21B143F50AC8BCB9BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072://Qho9PKBbl8Vrq9Jzbs6tlg1ySBKw4Q9gcoIsPw2bMy8Old9:QhoCl8Bqzzbs6okSCggcpsI2eAL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:185451:KjmhhAI6TjgNQETCFAClJHDIGAACMZywQRBgkJsHJKqiwAATwUiTCZBsAQwiCrqTeCiSQSnfM0kxQkUB1JwIEoCrAAkACghQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc3c7ffffffff
Perceptual Hash:b331cccccc333333
Difference Hash:00181c1c00000000
Wavelet Hash:ffdfc3cf00000000
Color Hash:#40b5bf

Other Hashes

Crop Resistant:00181c1c00000000

Scan History

Scan history not available

Unable to load historical scan data