Security Scan Report: forum.phish.net

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is phish.net and was registered 33 years ago.

Submitted URL: https://forum.phish.net/forum/show/1375341075

The Cisco Umbrella rank of the primary domain is #323,592 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 62%

2
Risk Score

Cloudflare bot wall blocked capture, so page content is unknown. Domain phish.net is 33 years old, highly established, with no Indicators of Compromise, YARA or IDS hits. Likely a false positive driven by the word 'phish'.

Risk Factors (1)
Circular redirect detected (final URL reappears in the chain) — here consistent with a Cloudflare challenge/SSO reload loop rather than a credential-harvesting redirect
Safety Factors (4)
Domain age 12,095 days (33 years) — WELL_ESTABLISHED, minimal age risk
Cisco Umbrella ranked #323,592, consistent with a long-standing niche community forum
No Indicators of Compromise, no YARA detections, no IDS alerts
All JavaScript served from the site's own domain; no third-party script hosts beyond the Cloudflare challenge endpoint
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

You're looking at domain 'forum.phish.net' on the network infrastructure generic top-level domain (.net); it also runs on subdomain 'forum'. Count 5 characters in 'phish' with 1 vowel and 4 consonants. Tokenizing the label suggests one word: phish. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://forum.phish.net/forum/show/1375341075

Page Load Overview

0.41s
Total Load Time
979 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:63%
Script:Latin
Direction:ltr

Detection Details

Text Length:132 chars
Detector Agreement:100%

Website Classification

Primary Category

phishing scam50% confidence
Type: static
Method: ml+structural

All Detected Categories

phishing scam
50%
technology software
48%
documentation technical
42%
news media journalism
30%
forum community discussion
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.26.0.48Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.26.1.48Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.74.122Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
115--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T101037D93ED173D13D3834A4559DE9AE42EBC630F090284E836AE9241CF9EA95D8D33CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:pFFFrNFCFOFVFssSfFNaibzSV2pDZXYfMO6:pDvEg7KsSfFctuDyD6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:39417:QACB1kgiMxAaQEMUAAgAEIIkBEiGCATIgJMkKY6hmJpMIYyoMCwpEwANpCAyKBgYBIEKYiAwBKFAAK0RVFJkJAAmMABQBSEY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:f676727858585878
Difference Hash:28080c0000000000
Wavelet Hash:00e4e4fcf0f0f0f0
Color Hash:#e06c6c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data