Security Scan Report: sobico.com

Redirected to:
https://premium-plans.com/spt/id7531/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 3 countries across 10 domains to perform 16 HTTP transactions. The main domain is sobico.com and was registered 23 years ago.

Submitted URL: https://sobico.com/5fe85f43/about.php

Effective URL:
https://premium-plans.com/spt/id7531/
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Page impersonates Spotify on premium-plans.com behind a CAPTCHA 'connection verification' gate — a phishing funnel shape. No credential form was captured, but the brand impersonation alone warrants avoiding it.

Risk Factors (5)
Impersonation of Spotify brand on a non-official domain (premium-plans.com)
Domain mismatch between displayed brand and hosting domain
Multi-domain redirect funnel ending in a verification gate
Unranked, low-reputation destination domain
Social-engineering 'verify your connection' prompt
Domain age information unavailable

Details

Page Title

Verifying

Scan Type

public

Domain Name Analysis

Domain 'sobico.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'sobico' stretches across 6 characters split between three vowels and three consonants. Breaking it apart gives three words: s, obi, co. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sobico.com/5fe85f43/about.php

Page Load Overview

1.34s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:59%
Script:Latin
Direction:ltr

Detection Details

Text Length:146 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media90% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
90%
social media network
89%
technology software
56%
documentation technical
51%
adult content
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7217.21.184.250Belgium
AS34762Combell NV
145.88.108.231Germany
AS44486SYNLINQ
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.19.230.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.19.229.21Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1610--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E1A244DB515262288D176E6383CC195C99389EA399531D9EB12E1409AFC7FF823D333B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:Z7MCMpFMCMpBMCMpuMCMpgMCMpZMCMpLMCMpANspuoamIQGVw28oT+:dMCMPMCMfMCM8MCMGMCM/MCMtMCMAspl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23313:CAICQYwrIPPBhBCBIQJQVYIHBIAHAmXAIX54lApYhiKDSQW6AShAwAkBGU8wBIECMAxwlikCABAkBLAYA0iigAgkAkMEJKIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff3f0f1f1fffff
Perceptual Hash:8d07f2fc1f07c0e2
Difference Hash:0000c0f070300000
Wavelet Hash:f0f070000000f0f0
Color Hash:#2dd28d

Other Hashes

Crop Resistant:0000c0f070300000

Scan History

Scan history not available

Unable to load historical scan data