ScanMalware.com

Security Scan Report: admin.staging.www.ny.152-53-37-155.plesk.page

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/66a3d8f2-b6d0-4b65-adac-f612271865b7Domain and IP registration (RDAP)/api/v1/rdap/66a3d8f2-b6d0-4b65-adac-f612271865b7How often this domain was scanned/api/v1/domain/stats/admin.staging.www.ny.152-53-37-155.plesk.pageScan history for this domain/api/v1/domain/history/admin.staging.www.ny.152-53-37-155.plesk.page?limit=15
This website contacted 25 IPs in 2 countries across 21 domains to perform 90 HTTP transactions. The main domain is plesk.page and was registered 6 years ago.

Submitted URL: https://admin.staging.www.ny.152-53-37-155.plesk.page/s

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Cloaking/filter-evasion settings tool ('Reds Exploit Corner') with tab-title spoofing and panic-key features, but no forms, credential capture, malware or threat-intel hits. Suspicious, not proven malicious.

Risk Factors (3)
Toolkit explicitly built to disguise the page (tab title/icon cloaking, about:blank opening, hidden tab)
Quick-exit 'panic key' and decoy tab title designed to evade supervision or filtering
Free shared-hosting subdomain with no published page-specific age or reputation
Safety Factors (4)
No credential, password or payment fields present
No Indicators of Compromise, YARA malware, IDS alerts or kit-roster matches
No cross-origin credential exfiltration detected; JS targets are routine analytics/CDN/font hosts
Mainly static settings UI rather than an active scam funnel
Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Domain Name Analysis

Within the .page top-level domain, 'admin.staging.www.ny.152-53-37-155.plesk.page' is registered with subdomain 'admin.staging.www.ny.152-53-37-155'. The second-level label 'plesk' is 5 characters long with one vowel and 4 consonants. Word splitting yields 2 words: pl, esk. The median word length lands at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://admin.staging.www.ny.152-53-37-155.plesk.page/s

Page Load Overview

2.67s
Total Load Time
5.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:880 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software54% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
54%
entertainment media
52%
documentation technical
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18152.53.37.155Manassas, Virginia, United States
AS214996netcup GmbH
3104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3140.82.121.5Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3104.21.26.223Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
3142.251.127.157Google · CDNUnited States
AS15169Google LLC
9025--

Detected Technologies5

Node.js
50%
HTTP/3
40%
Express
40%
Google Analytics
35%
jsDelivr
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FAE32EE5D24C10D67336C44BAB45B37C66B6F739D9810C65F12F6C0C5EC2AA922CAF29

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:VKiYurv4FmMCMPMCMjMCM4MCMwMCM3sVMH709gbPMfjSFOTyPGuGprrlCf8vs:Lgb709gMGFiyPGuGprlCfJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:146077:AKUUDvF4Agw3GIRWIAgAJQQOiCVJNA1AQJiBxcIYBSowEESFoMbmsMJiWFAPsKQykQYJIBKAcAAKSx1CdAQYDoAE50AwBEyA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:99ffc1819fc19999
Perceptual Hash:b8e3c9929c6c6c9c
Difference Hash:31d90333352b3333
Wavelet Hash:99ff81819f819999
Color Hash:#2d8649

Other Hashes

Crop Resistant:da5a5a5a5a5a5a5a,0000003232100000,0000046060680000,0000101000000000,0040aad4d0f00200,31d90333352b3333

Scan History

Scan history not available

Unable to load historical scan data