Security Scan Report: plutomovie.com

Redirected to:
https://deutschlandreport.click/c/survey/?on=Quantum%20AI&icid=w0vm3u0...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 4 countries across 6 domains to perform 15 HTTP transactions. The main domain is plutomovie.com and was registered 7 years ago.

Submitted URL: https://plutomovie.com/

Effective URL:
https://deutschlandreport.click/c/survey/?on=Quantum%20AI&icid=w0vm3u0...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

Fabricated dating advertorial reached through an ad redirect chain, hosted on a news-sounding domain that publishes no news. Collects email/age/discretion data cross-domain; no password or payment fields, so not overt credential phishing.

Risk Factors (5)
Deceptive hostname: a news-report-sounding domain (deutschlandreport.click) delivers a dating advertorial rather than any report or publication
Multi-hop ad redirect chain through pushub.net ad servers and xandnews.digital before landing on the survey funnel
Invented first-person testimonial presented as editorial content to drive dating sign-ups
Personal-data capture (email, age bracket, discretion preference) submitted cross-domain to the funnel operator
Unranked destination domain with no verifiable ownership or company imprint
Safety Factors (5)
No password, disguised password or payment fields on the page (verified form facts: 0/0/0)
No JavaScript malware patterns, no high-precision hunting-rule hits, no IDS alerts
All page scripts loaded from the site's own domain; no cross-origin credential exfiltration detected
Advertisement is at least labelled 'ANZEIGE' and the form includes an 18+ / consent checkbox
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Ich war zwei Jahre auf Dating-Apps – dann habe ich verstanden, was ich falsch gemacht habe | Abendlicht

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'plutomovie.com' is registered. The second-level label 'plutomovie' is 10 characters long holding five vowels versus 5 consonants. Segmentation suggests two words: pluto, movie. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

ANZEIGE = @ Abendlicht LIEBE & LEBEN ERFAHRUNGSBERICHT Ich war zwei Jahre auf Dating-Apps — dann habe ich verstanden, was ich die ganze Zeit falsch gemacht habe Endloses Swipen, Matches, die nie a...

Page Load Overview

1.37s
Total Load Time
583 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:7,037 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing/scam40% confidence
Type: static
Method: structural

All Detected Categories

phishing/scam
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15162.4.84.215Australia
AS154653ParkLogic Pty Ltd
0172.234.216.100Chicago, Illinois, United States
AS63949Akamai Connected Cloud
0198.134.116.17Garden City, New York, United States
AS27257Webair Internet Development Company Inc.
0173.239.53.20Garden City, New York, United States
AS27257Webair Internet Development Company Inc.
0173.239.53.32Garden City, New York, United States
AS27257Webair Internet Development Company Inc.
0157.245.252.232North Bergen, New Jersey, United States
AS14061DigitalOcean, LLC
0142.251.14.95Google · CDNUnited States
AS15169Google LLC
0142.251.110.97Google · CDNUnited States
AS15169Google LLC
023.194.190.168Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
0103.67.200.72Amsterdam, North Holland, Netherlands
AS60558Phoenix Nap, LLC.
1517--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E0F2F9136191223E7663A3D87B558349B329B107D6061278B59C016EDFCF9F986FB28C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:qzWoAOftmRtrzzb8Bpb6ElRzOOYbZe2D+0wrSoq:axAgmnzzwBQEPzOOYbZFLP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:37249:CQjoNguBsA0okZIBMBa+E1I1gvA5IgBBRAoCT4BwEGIQIkKYAuCaKBgAGgBVEFYRfREyh2hQJBIQkm0WAmM/RAIhAvAPfiWg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffc3c3c3c3
Perceptual Hash:b1cf6439ccce1931
Difference Hash:128c8c909e9e9e96
Wavelet Hash:cec2c3c3c3c3c3c3
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data