Security Scan Report: www.xn--bitrefll-q2a.com

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 7 domains to perform 50 HTTP transactions. The main domain is xn--bitrefll-q2a.com and was registered 2 months ago.

Submitted URL: https://www.xn--bitrefll-q2a.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Google page hosted on a 60-day-old punycode domain flagged as phishing by two independent threat feeds; brand impersonation of Google — do not enter credentials.

Risk Factors (5)
Google brand impersonation on an unrelated, non-Google domain
Multi-source phishing threat-intel match on the primary domain
Punycode (IDN) homograph-style hostname
60-day-old domain with no Umbrella ranking
HIGH-severity IDS/Samp;amhaus DROP alert tied to the page's traffic
Domain age information unavailable

Details

Page Title

Googleother network

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.xn--bitrefll-q2a.com' is registered; it also runs on subdomain 'www'. The second-level label 'xn--bitrefll-q2a' is 16 characters long with three vowels and nine consonants; it also includes one digit and three hyphens. Splitting it apart reveals 7 words: xn, bit, ref, ll, q, 2, a. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

°C) Logga in Innan du fortsatter till Google Vi anvander cookies och data, inklusive IP-adresser, for att % _leverera och underhalla Googles tjanster A. spara avbrott och skydda mot spam, bedrageri...

Page Load Overview

N/A
Total Load Time
1013 KB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:3,412 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content42% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
42%
corporate business
37%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8142.251.155.119Google · CDNUnited States
AS15169Google LLC
762.60.226.163Frankfurt am Main, Hesse, Germany
AS214351Femo It Solutions Limited
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7142.251.14.141Google · CDNUnited States
AS15169Google LLC
7142.251.151.120Google · CDNUnited States
AS15169Google LLC
7192.178.183.95Google · CDNUnited States
AS15169Google LLC
7142.251.150.7Google · CDNUnited States
AS15169Google LLC
07--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T197747D317300B83FB933CAA0A6FBAF4E3C65E15BDD0A46B4A995E5708FE2DB1101565C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:hG157pz+byFERAA7A+KJZbT1x2qPASsLbZIv1Xdf4omKJZ7:4v1z+baERAUA1JZbT1TPA7ZInhJZ7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:345456:kATjcEYZADAwSRJMIIuKIIJABDEDEQVoOSCCKMCpGwLHggvQDQqUMIQWUQAW1BhETwRqgh2gSawJRuSoIwBAYJA2mRAWIQUE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c3c3c3c3c3c18
Perceptual Hash:9bd9646465737451
Difference Hash:6869697969696969
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:070000001c0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data