Security Scan Report: superlative-fox-19a139.netlify.app

Redirected to:
https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 3 countries across 5 domains to perform 13 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://superlative-fox-19a139.netlify.app/feds.html

Effective URL:
https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Empty 'File not found' page reached via a redirect chain from a free Netlify subdomain to an IP-embedded Plesk host with a redirect-style name. No forms, malware or impersonation confirmed, but the infrastructure is suspicious.

Risk Factors (4)
Cross-domain redirect from a disposable free-hosting subdomain to an unrelated Plesk host whose name ('accounts-dk-redirection') and IP-embedded label resemble a credential-redirect landing pattern
Final endpoint is an opaque .php file (davs.php) on a host with no visible branding or content
Page returns only 'File not found.' — a redirect destination with no legitimate content, consistent with a burned or incomplete lure page
External references to free-hosting and Twilio-style endpoints commonly abused by phishing kits
Safety Factors (5)
No credential, login, or payment form on the page (0 forms, 0 password fields, 0 payment fields)
No JavaScript malware or high-precision YARA hits
No brand impersonation or typosquatting of another entity's brand detected
No cross-origin credential exfiltration detected and no credential handling in scripts
No Google Safe Browsing or content-malware indicator; the only threat-intel match is a generic, single-source abuse-reputation tag on a third-party sub-resource address
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'superlative-fox-19a139.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'superlative-fox-19a139'. The core label 'netlify' covers 7 characters split between two vowels and five consonants. Segmentation suggests three words: net, li, fy. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://superlative-fox-19a139.netlify.app/feds.html

Page Load Overview

1.30s
Total Load Time
29 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Text Length:1 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
591.218.65.223Frankfurt am Main, Hesse, Germany
AS44486SYNLINQ
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1108.138.7.106Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1185.27.134.55United Kingdom
AS34119Wildcard UK Limited
1104.26.9.174Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1108.138.7.5Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1108.138.7.109Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1172.67.71.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
139--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CCF047B702C03804477CC0957BE67248F133B2C7D54449C2B1AF2A971761B1571DBF49

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hPa0hKxrdf7SBwsXl4Z5imYkhPx2sc6baMn5C/rOGMxCadPzNZErfSdPOPGb:hPa0hKTGh1WbZbaY5C/r/MxCadPJZEuh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:616:AAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAQAAAABAAAAAAAQEAAAAAAAAAAAQIAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:8707070f0f0f1f1f
Difference Hash:8000000000000000
Wavelet Hash:40c0c0c000000000
Color Hash:#bf8040

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data