Security Scan: Unsubscribe

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3dd4f9fa-03c0-4222-b9f2-6633f66c14f3 Domain and IP registration (RDAP)/api/v1/rdap/3dd4f9fa-03c0-4222-b9f2-6633f66c14f3How often this domain was scanned/api/v1/domain/stats/xn--d1a.rest-icone.rent Scan history for this domain/api/v1/domain/history/xn--d1a.rest-icone.rent?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is rest-icone.rent and was registered 1 month ago.

Submitted URL: https://xn--d1a.rest-icone.rent/fjHgyShZ/

Effective URL:

https://out.petal-art.de/

Redirected

AI Security Verdict

Low Risk

Confidence: 60%

Risk Score

Single-field email unsubscribe page with no credential/payment capture and no threat-intel, YARA or IDS hits; entry-domain redirect is ordinary link-tracking, not evidence of abuse.

Risk Factors (2)

Redirect from a randomly-pathed, very new IDN domain (xn--d1a.rest-icone.rent) to a different registrable domain with unknown age

Title 'Unsubscribe' bears no relation to the entry hostname

Safety Factors (4)

Only an email field is collected — no password, payment, or disguised credential fields

No threat-intel, YARA, kit-roster, or IDS hits against the page or its resources

Form action points to the same final host (out.petal-art.de), not an unrelated exfiltration endpoint

Unsubscribe/email-preference landing pages legitimately look like this

Domain age information unavailable

Details

Page Title

Unsubscribe

Scan Type

public

Domain Name Analysis

Within the .rent top-level domain, 'xn--d1a.rest-icone.rent' is registered, featuring subdomain 'xn--d1a'. The core label 'rest-icone' covers 10 characters containing 4 vowels alongside 5 consonants, notching one hyphen. Tokenizing the label suggests three words: rest, i, cone. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.00s

Total Load Time

44 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

Text Length:23 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	62.173.140.6	Russia	AS34300Internet-Cosmos LLC
2	146.190.240.53	Toronto, Ontario, Canada	AS14061DigitalOcean, LLC
4	2	-	-

Detected Technologies2

HTTP/3

40%

HSTS

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A501285148035523D197B2FC77CE2B82CDD05CE993AC4109139332EEA9D9FBC9B86780

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kxC6NZk6QclfhtBqmRS6t3a51u1u1u1u1u1u1u15FfiGCivMVj3GWyplGoS:k0Iksp6mSUUUUUUU5MGC7jo2oS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:752:AAAIIQAAAAAAAQAggAAAAAAEAAAgAAACAAAAwAAAAAAAAAAAAAAAAAAAAAABACAAAAAAAAAAEAAAEAIAgAAAAAAAQAABAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7ffffffffff

Perceptual Hash:e6669999998c6666

Difference Hash:00080c0000000000

Wavelet Hash:ffffe7ff00000000

Color Hash:#e06c6c

Other Hashes

Crop Resistant:00080c0000000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: xn--d1a.rest-icone.rent