Security Scan Report: brwlstart-redirect.netlify.app

Redirected to:
https://brwlstrs.netlify.app/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 10 domains to perform 31 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://brwlstart-redirect.netlify.app

Effective URL:
https://brwlstrs.netlify.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 78%

9
Risk Score

Fake Brawl Stars gem/coin generator on a disposable netlify.app subdomain, impersonating Supercell's brand and flagged as phishing by threat intel; avoid and report.

Risk Factors (5)
Impersonation of the Brawl Stars (Supercell) brand on a non-official .netlify.app domain
Fake in-game currency generator requesting the victim's game account ID/username
Two phishing threat-intelligence reports covering the page's own domains (single-source, unverified)
Unknown-age, unranked subdomain on a shared hosting platform used as a disposable campaign host
Redirect-chain hostname pattern (brwlstart-redirect → brwlstrs) consistent with phishing infrastructure
Domain age information unavailable

Details

Page Title

Redirect

Scan Type

public

Domain Name Analysis

Domain 'brwlstart-redirect.netlify.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'brwlstart-redirect'. The second-level label 'netlify' is 7 characters long with two vowels and 5 consonants. It segments into three words: net, li, fy. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://brwlstart-redirect.netlify.app

Page Load Overview

6.51s
Total Load Time
402 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

Text Length:489 chars
Detector Agreement:67%

Website Classification

Primary Category

entertainment media61% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
61%
technology software
34%
gambling betting
31%
cryptocurrency blockchain
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
335.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
2104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
218.64.181.153Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
23.160.156.173Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
252.222.232.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
218.64.181.92Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
218.64.181.173Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3115--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13531705F30C7501A166255292B8F7204F866958FAE8E8C40B8DF47D40FA6B2A40FBFDD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hRPhKTGh1WEFaDaY5C/reCIfn587DoRRBkCdN0xJUoU55kK7Jox4NHl:TPcTGhwEFaDaeC/af587DolQFmb2eNHl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1473:AAKAQAAQAAAAAQAAAAAIAAAACAAAAAAYAECAAgEAkgBBAAAIAAAAAAAAAAQAABAAAoIRAAAAwAAEgIEQIAAAAAAACAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:83030707070f3fff
Difference Hash:8000000000000000
Wavelet Hash:70f0f0f0f0f0f0f0
Color Hash:#3a785b

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data