Security Scan Report: staging.dev.we.update.15-204-228-33.plesk.page

Redirected to:
https://staging.dev.we.update.15-204-228-33.plesk.page/
Submitted: Sep 26, 2026, 11:20:45 AMCompleted: Sep 26, 2026, 11:21:37 AMpubliccompleted

This website contacted 5 IPs in 1 country across 5 domains to perform 30 HTTP transactions. The main domain is staging.dev.we.update.15-204-228-33.plesk.page and was registered 14 years ago.

Submitted URL: http://staging.dev.we.update.15-204-228-33.plesk.page/

Effective URL:

https://staging.dev.we.update.15-204-228-33.plesk.page/
Redirected

AI Security Verdict

High Risk

Confidence: 74%

7
Risk Score

Cloned IXL branding (title/meta/OG copied verbatim) hosted on an unrelated, unranked plesk.page subdomain with garbled obfuscated text — brand impersonation. No credential or payment form found, so no confirmed credential phishing.

Risk Factors (4)
Impersonation of the IXL education brand on a non-official, unrelated domain (plesk.page shared-hosting staging subdomain)
Copied IXL meta/title/OG tags used to borrow the brand's reputation
Garbled/obfuscated Unicode header and button text inconsistent with a genuine IXL page
Unranked domain with no verifiable ownership tie to IXL Learning
Domain age information unavailable

Details

Page Title

IXL | Math, Language Arts, Science, Social Studies, and Spanish

Scan Type

public

Domain Name Analysis

Within the .page top-level domain, 'staging.dev.we.update.15-204-228-33.plesk.page' is registered with subdomain 'staging.dev.we.update.15-204-228-33'. Count 5 characters in 'plesk' split between one vowel and four consonants. Segmentation suggests 2 words: pl, esk. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://staging.dev.we.update.15-204-228-33.plesk.page/

Page Load Overview

1.55s
Total Load Time
401 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:8,489 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning97% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

education learning
97%
adult content
56%
government public service
43%
phishing scam
36%
technology software
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
615.204.228.33Reston, Virginia, United States
AS16276OVH SAS
6142.251.14.97Google · CDNUnited States
AS15169Google LLC
6142.250.154.95Google · CDNUnited States
AS15169Google LLC
6142.251.13.94Google · CDNUnited States
AS15169Google LLC
6216.239.34.36Google · CDNUnited States
AS15169Google LLC
305--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C4C2B563B9981E2C169744CAA1276364E37E820EF5490C40E8FD52F4A3DEC5CE76F627

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:1WrZ5oZ55zOKCkNhkckkj7k2mkzZgsFYks2Kjhs2Kjhs2Kjhs2Kjhs2Kjg:Mw8knk9k/kNkzZg2eFeFeFeFeg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:25818:YGggAMgMAAESUY4JQXEwKBCMQHhZKiIpZCYFUhFigB0ygMonlJ0wqimeQIoREH0gADEABmYlWsCZAACRGQAgJqINA4LIABAD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00001838180001
Perceptual Hash:c8f032dec8d93276
Difference Hash:2190003030300001
Wavelet Hash:ff033c3c3c3c0001
Color Hash:#45d22d

Other Hashes

Crop Resistant:2190003030300001

Scan History

Scan history not available

Unable to load historical scan data