Security Scan Report: invoice.supersmarts.net

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is supersmarts.net and was registered 4 years 7 months ago.

Submitted URL: https://invoice.supersmarts.net/backend/config/

AI Security Verdict

Moderate Risk

Confidence: 65%

4
Risk Score

Misconfigured open directory index exposing /backend/config/ files (auth.php, database.php). Not a scam or phishing page, but a real server-side information-exposure issue the site owner should fix.

Risk Factors (2)
Directory listing enabled on a backend/config path, exposing sensitive application configuration file names and potentially their contents
Indicates poor server hardening on a site branded around invoicing (invoice.supersmarts.net), where leaked DB/auth config could be abused
Safety Factors (5)
No phishing, malware, or credential-harvesting behavior detected on the page
No forms, no obfuscated JavaScript, no third-party scripts, no external domains contacted
Domain age over 4 years with no threat-intel or blocklist history
Page contains no brand impersonation or lure content addressing visitors
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 4
Domain age information unavailable

Details

Page Title

Index of /backend/config

Scan Type

public

Domain Name Analysis

Within the network infrastructure generic top-level domain (.net), 'invoice.supersmarts.net' is registered; it also runs on subdomain 'invoice'. The core label 'supersmarts' covers 11 characters split between three vowels and 8 consonants. Word splitting yields two words: super, smarts. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Index of /backend/config Name Last modified Size Description Parent Directory - a 2024-02-12 21:23 6.3K auth.php 2024-02-12 21:23 3.8K broadcasting, php 2024-02-12 21:23 2.1K cache.php 2024-02-12 2...

Page Load Overview

1.15s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:65%
Script:Latin
Direction:ltr

Detection Details

Text Length:641 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software83% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
83%
documentation technical
72%
news media journalism
69%
cryptocurrency blockchain
62%
government public service
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.16.131.160Canada
AS53589PlanetHoster
21--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C86195549AE5D27B4D801957E204BD9ACBF688F893B10521BC4FBDC7EB889BCC607463

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:fAeWQolGmnJEBmSeX3pmEYXjm/4b4XHm02XWm4Y4KmQoX3mA+Xtm8OXfmOOXpmcA:f6bKhCh4beZyamiCu0IO0MJkD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3441:AEYCQgChEIBABDFogiEQCkhEIBFAACAMAAAJAAAiFKCYACAABAAkIBAAAACAiCYCAIAAAAAAAQAEAIQBQwECgQAiQADDIBSQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f7fffffff
Perceptual Hash:81017fff0f0303fc
Difference Hash:c0c0d0d0c0000000
Wavelet Hash:3030303030f0f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:c0c0d0d0c0000000

Scan History

Scan history not available

Unable to load historical scan data