Security Scan Report: xn--d1a.rest-icone.rent

Redirected to:
https://out.petal-art.de/
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is rest-icone.rent and was registered 1 month ago.

Submitted URL: https://xn--d1a.rest-icone.rent/okUGPbg/

Effective URL:
https://out.petal-art.de/
Redirected

AI Security Verdict

Low Risk

Confidence: 65%

2
Risk Score

Plain 'Unsubscribe' page with one email field, no credentials or payment data collected. Generic title and a cross-domain .rent-to-.de redirect chain, but no threat-intel, malware, IDS or impersonation evidence found.

Risk Factors (3)
Generic page title 'Unsubscribe' bears no relation to the entry host (the title is not a brand name, so this is a weak mismatch signal, not impersonation)
Obscure multi-domain redirect chain from a punycode .rent host to an unrelated .de host — consistent with bulk/newsletter link infrastructure but unexplained
Entry domain is only 19 days old; the destination domain's age is unknown (weak priors only, not evidence)
Safety Factors (5)
No credential or payment collection: 0 password, 0 disguised-password and 0 payment fields
No JavaScript malware, no obfuscated scripts, all JavaScript served from the site's own domain
No threat-intelligence matches, no Indicators of Compromise, no network IDS alerts
No brand impersonation — the page presents no other organisation's brand, and the only text is 'Unsubscribe'
A plain unsubscribe/list-removal form is normal, benign infrastructure
Domain age information unavailable

Details

Page Title

Unsubscribe

Scan Type

public

Domain Name Analysis

The domain 'xn--d1a.rest-icone.rent' uses the .rent top-level domain with subdomain 'xn--d1a'. Count 10 characters in 'rest-icone' with 4 vowels and five consonants; it also includes 1 hyphen. Tokenizing the label suggests 3 words: rest, i, cone. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xn--d1a.rest-icone.rent/okUGPbg/

Page Load Overview

0.72s
Total Load Time
44 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:23 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
262.173.140.6Russia
AS34300Internet-Cosmos LLC
2146.190.240.53Toronto, Ontario, Canada
AS14061DigitalOcean, LLC
42--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A501285148035523D197B2FC77CE2B82CDD05CE993AC4109139332EEA9D9FBC9B86780

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kxC6NZk6QclfhtBqmRS6t3a51u1u1u1u1u1u1u15FfiGCivMVj3GWyplGoS:k0Iksp6mSUUUUUUU5MGC7jo2oS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:752:AAAIIQAAAAAAAQAggAAAAAAEAAAgAAACAAAAwAAAAAAAAAAAAAAAAAAAAAABACAAAAAAAAAAEAAAEAIAgAAAAAAAQAABAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7ffffffffff
Perceptual Hash:e6669999998c6666
Difference Hash:00080c0000000000
Wavelet Hash:ffffe7ff00000000
Color Hash:#5cac53

Other Hashes

Crop Resistant:00080c0000000000

Scan History

Scan history not available

Unable to load historical scan data