ScanMalware.com

Security Scan Report: mvl.whm.www.app.admin.as.152-53-37-155.plesk.page

Redirected to:
https://mvl.whm.www.app.admin.as.152-53-37-155.plesk.page/s
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/705304cf-b07a-4494-870f-f370df882ea8Domain and IP registration (RDAP)/api/v1/rdap/705304cf-b07a-4494-870f-f370df882ea8How often this domain was scanned/api/v1/domain/stats/mvl.whm.www.app.admin.as.152-53-37-155.plesk.pageScan history for this domain/api/v1/domain/history/mvl.whm.www.app.admin.as.152-53-37-155.plesk.page?limit=15
This website contacted 24 IPs in 2 countries across 21 domains to perform 90 HTTP transactions. The main domain is plesk.page and was registered 6 years ago.

Submitted URL: http://mvl.whm.www.app.admin.as.152-53-37-155.plesk.page/s

Effective URL:
https://mvl.whm.www.app.admin.as.152-53-37-155.plesk.page/s
Redirected

AI Security Verdict

Moderate Risk

Confidence: 58%

5
Risk Score

No forms, malware, YARA or Indicators of Compromise were found; risk comes from the 'Reds Exploit Corner' tab-cloaking / panic-key evasion features, a Google-spoofed tab title and an overlong deceptive Plesk hostname.

Risk Factors (4)
Deception/evasion tooling: 'Tab cloak', 'about:blank' hidden tab and 'Panic key' are designed to conceal activity from a supervisor, employer, school or filtering system.
Tab title spoofed to 'Google' with a 'Google Search' cloak preset on an unrelated .plesk.page host — misleading tab identity.
Overlong, stacked and deceptive hostname containing 'www.app.admin.as' and a bare IP-like label typical of throwaway Plesk tenants.
Subdomain sits on a shared hosting namespace where apex age (2391 days) belongs to the platform, not this page; the page's own age is effectively unknown.
Safety Factors (5)
No forms at all: 0 password fields, 0 disguised password fields, 0 payment fields — no credential or payment capture.
No Indicators of Compromise and no threat-intel matches against the page or its resources.
No JavaScript malware (YARA) patterns, no high-precision native-YARA hits, no known malicious kits in the roster.
No network IDS alerts and no JavaScript behavioral signals (no credential exfiltration, no DevTools blocking pattern).
Cross-origin traffic is limited to mainstream CDNs, analytics and a media player, consistent with ordinary page assets.
Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Domain Name Analysis

Domain 'mvl.whm.www.app.admin.as.152-53-37-155.plesk.page' uses the .page top-level domain and includes subdomain 'mvl.whm.www.app.admin.as.152-53-37-155'. Count 5 characters in 'plesk' containing 1 vowel alongside four consonants. Breaking it apart gives two words: pl, esk. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://mvl.whm.www.app.admin.as.152-53-37-155.plesk.page/s

Page Load Overview

3.84s
Total Load Time
5.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:880 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software54% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
54%
entertainment media
52%
documentation technical
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
21152.53.37.155Manassas, Virginia, United States
AS214996netcup GmbH
3104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3140.82.121.6Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
3192.178.183.97Google · CDNUnited States
AS15169Google LLC
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
3142.251.127.157Google · CDNUnited States
AS15169Google LLC
3142.251.13.94Google · CDNUnited States
AS15169Google LLC
9024--

Detected Technologies2

Google Analytics
35%
jsDelivr
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FAE32EE5D24C10D67336C44BAB45B37C66B6F739D9810C65F12F6C0C5EC2AA922CAF29

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:VKiYurv4FmMCMPMCMjMCM4MCMwMCM3sVMH709gbPMfjSFOTyPGuGprrlCf8vs:Lgb709gMGFiyPGuGprlCfJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:146077:AKUUDvF4Agw3GIRWIAgAJQQOiCVJNA1AQJiBxcIYBSowEESFoMbmsMJiWFAPsKQykQYJIBKAcAAKSx1CdAQYDoAE50AwBEyA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:99ffc1819fc19999
Perceptual Hash:b8e3c9929c6c6c9c
Difference Hash:31d90333352b3333
Wavelet Hash:99ff81819f819999
Color Hash:#46931f

Other Hashes

Crop Resistant:da5a5a5a5a5a5a5a,0000003232100000,0000046060680000,0000101000000000,0040aad4d0f00200,31d90333352b3333

Scan History

Scan history not available

Unable to load historical scan data