Security Scan Report: pengu-allocations.org

Submitted: Completed: publiccompleted
This website contacted 19 IPs in 3 countries across 10 domains to perform 21 HTTP transactions. The main domain is pengu-allocations.org and was registered 1 year ago.

Submitted URL: https://pengu-allocations.org/

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Expired parked domain whose primary domain was reported (single-source, unverified) as phishing. No credential or payment form on the captured page, but a flagged, abandoned domain serving parking ads should be avoided.

Risk Factors (3)
Primary domain flagged as phishing by threat intelligence (single-source, unverified)
Expired domain parked on an ad-injection/parking network with multiple third-party ad and tracking scripts
Expired domains are commonly re-registered and repurposed for phishing, malware or traffic monetisation
Domain age information unavailable

Details

Page Title

pengu-allocations.orgother network

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'pengu-allocations.org' is registered with no subdomain. Count 17 characters in 'pengu-allocations' containing 7 vowels alongside 9 consonants; bonus characters include 1 hyphen. Segmentation suggests three words: peng, u, allocations. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pengu-allocations.org/

Page Load Overview

2.33s
Total Load Time
299 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Text Length:132 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content52% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
52%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3103.224.182.189San Diego, California, United States
AS133618Trellian Pty. Limited
1143.204.181.92Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.218.186.77Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
132.187.228.68Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
1185.111.111.155Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
118.173.205.2Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
194.237.89.114Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
137.19.194.81Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
2119--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T158E2C5144AF10411559B2021EEBFAE8437354A27754CAD08BDCC6A40EFEDABB4DB6BF4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:5BZBsjBjrAyhtbgt4MiIO/5/9SLwcRxqh8VhcVhaQvGC:NMMdsh8VhcVha4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34017:gUjxNCJxJQZlJYgcQsAIAgAAgCCpAZQ8oLAAlfAIYnQ1LoU4CECZBJLCAEIKSQwidKKiFhnWWAOQQkhE4AssSkoQO4SoDQYC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c300000000ff
Perceptual Hash:a8609f4a9b4ab375
Difference Hash:7196969797b3b33b
Wavelet Hash:0043e7e7c31918ff
Color Hash:#4f783a

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data