Security Scan: Google

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a53b6db0-0ea0-4888-a85b-6a2f26b96490 Domain and IP registration (RDAP)/api/v1/rdap/a53b6db0-0ea0-4888-a85b-6a2f26b96490How often this domain was scanned/api/v1/domain/stats/whm.www.demo.www.api.as.152-53-37-155.plesk.page Scan history for this domain/api/v1/domain/history/whm.www.demo.www.api.as.152-53-37-155.plesk.page?limit=15

This website contacted 27 IPs in 2 countries across 21 domains to perform 90 HTTP transactions. The main domain is plesk.page and was registered 6 years ago.

Submitted URL: https://whm.www.demo.www.api.as.152-53-37-155.plesk.page/s

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

A gaming/exploit-tools settings page on a free Plesk subdomain that deliberately cloaks its browser tab as 'Google'. No forms, no threat-intel or malware hits; risk comes from the deceptive cloaking, not data collection.

Risk Factors (4)

Deceptive tab-title cloaking: the page sets its tab title to 'Google' while its own content is a gaming/exploit settings panel

Cloaking and panic-key features ('hidden tab', 'quick exit key') are designed to hide activity from observers

Obscure deep subdomain on a free shared-hosting namespace (plesk.page) with no attributable page age

Unranked domain (not in Cisco Umbrella top 1M) with a hostname that mimics a nested whm/www/api structure

Safety Factors (5)

No credential, login, email or payment fields present (0 forms)

No Indicators of Compromise matched against the page or its resources

No JavaScript malware (YARA) patterns and no high-precision native YARA hits

No network IDS alerts and no credential exfiltration detected

Cross-origin scripts come from well-ranked, legitimate hosts (api.github.com, Google analytics, jsDelivr, FontAwesome)

Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Favicon Hash

MMH3: 708578229

MD5: f3418a443e7d841097c714d69ec4bcb8

Domain Name Analysis

Within the .page top-level domain, 'whm.www.demo.www.api.as.152-53-37-155.plesk.page' is registered and includes subdomain 'whm.www.demo.www.api.as.152-53-37-155'. Its registrable label 'plesk' stretches across 5 characters holding one vowel versus four consonants. Splitting it apart reveals 2 words: pl, esk. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.72s

Total Load Time

2.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:880 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software54% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

54%

entertainment media

52%

documentation technical

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	152.53.37.155	Manassas, Virginia, United States	AS214996netcup GmbH
3	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.20.95Google · CDN	United States	AS15169Google LLC
3	140.82.121.5	Frankfurt am Main, Hesse, Germany	AS36459GitHub, Inc.
3	142.251.110.97Google · CDN	United States	AS15169Google LLC
3	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.20.94Google · CDN	United States	AS15169Google LLC
3	104.21.26.223Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	216.239.34.36Google · CDN	United States	AS15169Google LLC
90	27	-	-