Security Scan: HeadlineLogic News Portal

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3d793f31-4bbc-4ca0-871a-fe858b5b1554 Domain and IP registration (RDAP)/api/v1/rdap/3d793f31-4bbc-4ca0-871a-fe858b5b1554How often this domain was scanned/api/v1/domain/stats/ayeguya.top Scan history for this domain/api/v1/domain/history/ayeguya.top?limit=15

This website contacted 54 IPs in 5 countries across 52 domains to perform 151 HTTP transactions. The main domain is ayeguya.top and was registered 1 year ago.

Submitted URL: https://ayeguya.top

Effective URL:

https://headlinelogic.com/?d=ayeguya.top&pcid=112&a=false&uuid=5e4aa15...

Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Ad-arbitrage redirect landing on the established headlinelogic.com (not impersonation). No malware, IoCs or exfiltration, but a login/signup collecting passwords sits alongside a 'domain expired' notice on a parking-vendor page — don't enter credentials.

Risk Factors (4)

Excessive redirect chain (9 hops, 6 cross-domain) through advertising/identity-sync exchanges before landing on monetised content

Login and signup forms capturing email + password on a page that simultaneously displays a 'this domain has expired' renewal notice and a domain-parking vendor's copyright — incoherent site ownership for a credential-collecting page

Password input fields present in the HTML but not visible in the rendered capture (login/signup UI partially obscured)

Traffic-arbitrage/parking-style page using recycled news headlines to hold visitors while collecting account sign-ups

Safety Factors (4)

Final destination headlinelogic.com is an established domain in the Cisco Umbrella top 1M and owns the brand it displays; the cross-domain redirect is therefore not brand impersonation

Forms post to headlinelogic.com on the same destination domain — no cross-origin credential exfiltration detected

No Indicators of Compromise, no hunting rule malware, no kit-roster match, no Safe Browsing threat

No payment fields; contact/legal (terms, privacy) links present; no obfuscated or credential-exfiltrating JavaScript

Domain age information unavailable

Details

Page Title

HeadlineLogic News Portal

Scan Type

public

Favicon Hash

MMH3: 908830000

MD5: 5f2f255c93815c244ff6c3b0718b0e6e

Domain Name Analysis

You're looking at domain 'ayeguya.top' on the .top top-level domain and has no subdomain. Its registrable label 'ayeguya' stretches across 7 characters split between 4 vowels and 3 consonants. It segments into three words: aye, guy, a. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.76s

Total Load Time

2.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2,739 chars

Detector Agreement:100%

Website Classification

Primary Category

entertainment media92% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

92%

social_media

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
45	172.236.104.43	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	172.234.216.100	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	172.232.7.47	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	172.236.96.118	Chicago, Illinois, United States	AS63949Akamai Connected Cloud
2	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	142.250.154.95Google · CDN	United States	AS15169Google LLC
2	142.251.110.155Google · CDN	United States	AS15169Google LLC
2	172.67.199.186Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.42.32Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
151	54	-	-