Security Scan Report: pqlzd-baaaa-aaaai-aqfja-cai.icp0.io

Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 7 domains to perform 27 HTTP transactions. The main domain is icp0.io and was registered 4 years 2 months ago.

Submitted URL: https://pqlzd-baaaa-aaaai-aqfja-cai.icp0.io/

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Internet Computer gateway 451 suspension notice for a canister flagged as phishing by a single unverified source. No forms or credentials are captured by the page itself, but the hostname's reported phishing history warrants caution.

Risk Factors (3)
Single-source phishing report against the exact hostname being scanned
Hostname serves a platform-level suspension/denial page, indicating the hosted content was flagged for a policy violation
Embedded third-party form (Jotform) solicits an email address on an otherwise empty error page
Domain age information unavailable

Details

Page Title

Unavailable Due to Policy Violation - 451 | Internet Computer

Scan Type

public

Domain Name Analysis

You're looking at domain 'pqlzd-baaaa-aaaai-aqfja-cai.icp0.io' on the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'pqlzd-baaaa-aaaai-aqfja-cai'. The registrable portion 'icp0' spans 4 characters containing one vowel alongside 2 consonants, notching 1 digit. Breaking it apart gives 2 words: icp, 0. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pqlzd-baaaa-aaaai-aqfja-cai.icp0.io/

Page Load Overview

1.43s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:332 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical42% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
42%
government public service
39%
adult content
39%
technology software
28%
news media journalism
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9195.5.171.242United States
AS398485DFINITY USA Research, LLC
2212.71.124.188Langnau am Albis, Zurich, Switzerland
AS24951EveryWare AG
234.102.158.113Google · CDNKansas City, Missouri, United States
AS396982Google LLC
28.233.166.209Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2142.251.156.119Google · CDNUnited States
AS15169Google LLC
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
2142.251.155.119Google · CDNUnited States
AS15169Google LLC
2142.251.152.119Google · CDNUnited States
AS15169Google LLC
2142.251.13.94Google · CDNUnited States
AS15169Google LLC
2142.251.153.119Google · CDNUnited States
AS15169Google LLC
2710--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AE231AF5639061BCE40797BEAF2A39283135A8FBEA01C598F18C4744BFC15E78956BD0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:ouiNa4W4Y0Veuc8jhIjB5acTs0eeALo+gu2fsZukvfZ:ouVVfacTHLuaA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:46253:0GWAjoAEMq5UUoEiEJLAgWhQwAYCchwA6hEIgClEp1MMMNRgQYaqYEEFLCDIRCiYAMMRMyIHYqCLAR2BiSZcqQQBRSYEAwPQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7e7e7ffe7e7ff
Perceptual Hash:f7750acd88262d33
Difference Hash:aa0c4c0c08040c08
Wavelet Hash:00e6c6c6e6e2c2fe
Color Hash:N/A

Other Hashes

Crop Resistant:aa0c4c0c08040c08

Scan History

Scan history not available

Unable to load historical scan data