Security Scan Report: superlative-fox-19a139.netlify.app

Redirected to:
https://accounts-dk-redirection.91-218-65-223.plesk.page/tagier/index....
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 3 countries across 5 domains to perform 16 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://superlative-fox-19a139.netlify.app/feds.html

Effective URL:
https://accounts-dk-redirection.91-218-65-223.plesk.page/tagier/index....
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Google-branded consent page served from a disposable Netlify subdomain that bounces through 3 redirects to an IP-based host named 'accounts-dk-redirection'; classic Google impersonation lure. Do not enter any Google credentials.

Risk Factors (4)
Impersonation of Google's brand and consent/account wording on domains that are not Google's
Deceptive hostname containing 'accounts' and 'redirection' on a bare-IP Plesk host
Multi-hop redirect chain from a disposable Netlify subdomain to unrelated hosting infrastructure
Destination page gates/blocks access, consistent with a cloaked phishing landing
Domain age information unavailable

Details

Page Title

Googleother network

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'superlative-fox-19a139.netlify.app' is registered; it also runs on subdomain 'superlative-fox-19a139'. The registrable portion 'netlify' spans 7 characters holding 2 vowels versus 5 consonants. Segmentation suggests three words: net, li, fy. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://superlative-fox-19a139.netlify.app/feds.html

Page Load Overview

4.66s
Total Load Time
203 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:236 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking70% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
70%
cryptocurrency blockchain
69%
news media journalism
65%
government public service
65%
adult content
61%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4142.251.151.119Google · CDNUnited States
AS15169Google LLC
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1108.138.7.5Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1185.27.134.55United Kingdom
AS34119Wildcard UK Limited
191.218.65.223Frankfurt am Main, Hesse, Germany
AS44486SYNLINQ
1172.67.71.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1142.251.13.94Google · CDNUnited States
AS15169Google LLC
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
1142.251.13.100Google · CDNUnited States
AS15169Google LLC
1613--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18D746C316300783BB923D9A0B2FF6F4D3C26E157EE0B06A8B9E5D5709EF29B2141565C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:qomfjz+C1VuAGJZLaJUmFxoGkjIkMwJZTzdmxO:qomf31VuAGJZOJUmUGkjIJwJZTzdt

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:341177:I0fQmSEATBMKQkCg+DDQkkAKIgSaBEhEgkAwaAdQoSNDJpFwIg0BAiHgLRtgQWAKAFh+SIkwJSqOoDISABAmjKaBQmHg4CyR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c3c3c3c3c3c18
Perceptual Hash:9bd9646465737451
Difference Hash:6869697969696969
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:#2d8649

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data