Security Scan Report: choisir-creneau-option.help

Redirected to:
https://choisir-creneau-option.help/login_up.php
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 3 countries across 3 domains to perform 27 HTTP transactions. The main domain is choisir-creneau-option.help and was registered 4 months ago.

Submitted URL: https://choisir-creneau-option.help/

Effective URL:
https://choisir-creneau-option.help/login_up.php
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Plesk-branded login page on an unrelated, unranked domain, flagged by Google Safe Browsing for social engineering — a credential-phishing lure, not the real Plesk panel. Do not enter credentials.

Risk Factors (5)
Google Safe Browsing social-engineering (phishing) detection
Plesk-branded login form on an unrelated, unranked domain — brand impersonation
Credential capture (username + password) behind a third-party brand's login page
Domain name (choisir-creneau-option.help) is unrelated to hosting/control-panel services
High-severity Spamhaus DROP IDS alert on the host
Domain age information unavailable

Details

Page Title

Plesk Obsidian 18.0.81

Scan Type

public

Domain Name Analysis

Within the .help top-level domain, 'choisir-creneau-option.help' is registered without a subdomain. Count 22 characters in 'choisir-creneau-option' split between 10 vowels and ten consonants, plus 2 hyphens. Tokenizing the label suggests six words: choi, sir, c, ren, eau, option. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://choisir-creneau-option.help/

Page Load Overview

1.66s
Total Load Time
3.4 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:608 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software72% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
72%
government public service
32%
cryptocurrency blockchain
29%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9158.94.208.174Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
663.33.76.219Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
634.111.148.117Google · CDNKansas City, Missouri, United States
AS396982Google LLC
663.35.140.205Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
274--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T131B3F91E99543F3B0BC223E3BE53655BA978824471D4A000E9EE41AA07FEDDDD19F07A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:reiQ7I04GZrJMlk5kcDC+8LOtYPLIJwXiI7NnVcAC:OnDC+8LOWj+wXiIhniAC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:115945:BBjSqIgAAkygAgiRhCFBIHsZECUKklqDQFOEYCACiYYQAKAiGlCADBELiyliMjDVKsUg4DhCgAgwpBERCgSSTCcRYwRDgkC7

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0010001918181800
Perceptual Hash:8c6666d933b13399
Difference Hash:71616db3b3b3b331
Wavelet Hash:0010013b3b3b3f27
Color Hash:#61d22d

Scan History

Scan history not available

Unable to load historical scan data