Security Scan Report: superlative-fox-19a139.netlify.app

Redirected to:
https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 5 domains to perform 13 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://superlative-fox-19a139.netlify.app/feds.html

Effective URL:
https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php
Redirected

AI Security Verdict

High Risk

Confidence: 66%

7
Risk Score

Free-host subdomain redirecting through two hops to an IP-literal plesk host named 'accounts-dk-redirection' ending in an empty 404 — phishing-redirect infrastructure with no legitimate content; no form was captured, but the destination should not be trusted.

Risk Factors (4)
Deceptive destination hostname implying an 'accounts' redirection service on a raw-IP hosting domain
Cross-domain redirect from a free hosting platform subdomain to an unrelated IP-based plesk.page host
No substantive page content — redirect target returns only 'File not found.'
IDS hunting alerts for Netlify-hosted phishing landing and slowAES cookie-challenge scripting
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'superlative-fox-19a139.netlify.app' is registered; it also runs on subdomain 'superlative-fox-19a139'. The registrable portion 'netlify' spans 7 characters with 2 vowels and 5 consonants. Breaking it apart gives 3 words: net, li, fy. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://superlative-fox-19a139.netlify.app/feds.html

Page Load Overview

1.13s
Total Load Time
28 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Text Length:1 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
691.218.65.223Frankfurt am Main, Hesse, Germany
AS44486SYNLINQ
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1108.138.7.5Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1185.27.134.55United Kingdom
AS34119Wildcard UK Limited
1104.26.8.174Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1108.138.7.109Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1104.26.9.174Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
138--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CCF047B702C03804477CC0957BE67248F133B2C7D54449C2B1AF2A971761B1571DBF49

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hPa0hKxrdf7SBwsXl4Z5imYkhPx2sc6baMn5C/rOGMxCadPzNZErfSdPOPGb:hPa0hKTGh1WbZbaY5C/r/MxCadPJZEuh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:616:AAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAQAAAABAAAAAAAQEAAAAAAAAAAAQIAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:8707070f0f0f1f1f
Difference Hash:8000000000000000
Wavelet Hash:40c0c0c000000000
Color Hash:#c5b687

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data