Security Scan Report: superlative-fox-19a139.netlify.app

Redirected to:
https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 3 countries across 5 domains to perform 14 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://superlative-fox-19a139.netlify.app/feds.html

Effective URL:
https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php
Redirected

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Free-hosting page redirects through 3 hops to an IP-embedded 'accounts...redirection' plesk.php host that served only 'File not found.' — phishing-style redirect infrastructure, no live form captured.

Risk Factors (5)
Multi-hop cross-domain redirect from a free netlify.app subdomain to an unrelated plesk.page host
Deceptive final hostname embedding an IP address plus an account-redirection keyword ('accounts-dk-redirection.91-218-65-223.plesk.page')
Non-standard PHP endpoint /davs.php that returned only an error page, consistent with a disabled or moved redirector/phishing kit
Repeated Netlify-hosted 'possible phishing landing' IDS heuristics during the navigation
Entry subdomain on a free instant-publishing platform with no attributable age or reputation
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'superlative-fox-19a139.netlify.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'superlative-fox-19a139'. The core label 'netlify' covers 7 characters with 2 vowels and five consonants. Tokenizing the label suggests 3 words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://superlative-fox-19a139.netlify.app/feds.html

Page Load Overview

21.07s
Total Load Time
29 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Text Length:1 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
691.218.65.223Frankfurt am Main, Hesse, Germany
AS44486SYNLINQ
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1108.138.7.5Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1185.27.134.55United Kingdom
AS34119Wildcard UK Limited
1172.67.71.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1108.138.7.65Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1108.138.7.106Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.26.9.174Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
149--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D59002FEA552050A5C607A944DC11252081C439428825A501681A46C841C119DD421E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6Yne983z:qzxO964e983z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:298f3ef86411256563f0ca2906e5f1e3

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:8707070f0f0f1f1f
Difference Hash:8000000000000000
Wavelet Hash:40c0c0c000000000
Color Hash:#e0a46c

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data