Security Scan Report: superlative-fox-19a139.netlify.app

Redirected to:
https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 5 domains to perform 13 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://superlative-fox-19a139.netlify.app/feds.html

Effective URL:
https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php
Redirected

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Throwaway Netlify page redirects to an IP-literal Plesk host named 'accounts-dk-redirection' serving a PHP stub; IDS flagged suspicious Netlify phishing landings. No form captured, but the chain is phishing infrastructure — avoid.

Risk Factors (5)
Redirect off a free hosting subdomain onto an IP-literal Plesk server serving a PHP endpoint
Deceptive hostname impersonating an 'accounts…redirection' service for a country-specific audience (dk)
Multiple IDS hunting alerts for suspicious Netlify-hosted phishing landings and aes.js cookie-challenge scripting
Landing page content is a bare 'File not found.' stub — no legitimate purpose, no branding, no content explaining the redirect
Linkage to free-abuse and lookalike-domain infrastructure (infinityfree, twil.io) in the redirect/asset set
Domain age information unavailable

Details

Page Title

redimalainreidmalafasmalrdimacrmalk-9656.twil.ioother network

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'superlative-fox-19a139.netlify.app' is registered, featuring subdomain 'superlative-fox-19a139'. Count 7 characters in 'netlify' split between 2 vowels and five consonants. Segmentation suggests three words: net, li, fy. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Bs This site can’t be reached redimalainreidmalafasmalrdimacrmalk-9656.t respond. took too long to Try: * Checking the connection * Checking the proxy and the firewall ERR_TIMED_OUT ( Details)

Page Load Overview

10.81s
Total Load Time
27 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Text Length:1 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3185.27.134.55United Kingdom
AS34119Wildcard UK Limited
235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
291.218.65.223Frankfurt am Main, Hesse, Germany
AS44486SYNLINQ
1108.138.7.106Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1108.138.7.65Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1108.138.7.109Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.21.33.170Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
138--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CCF047B702C03804477CC0957BE67248F133B2C7D54449C2B1AF2A971761B1571DBF49

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hPa0hKxrdf7SBwsXl4Z5imYkhPx2sc6baMn5C/rOGMxCadPzNZErfSdPOPGb:hPa0hKTGh1WbZbaY5C/r/MxCadPJZEuh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:616:AAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAQAAAABAAAAAAAQEAAAAAAAAAAAQIAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:8707070f0f0f1f1f
Difference Hash:8000000000000000
Wavelet Hash:40c0c0c000000000
Color Hash:07000000000

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data