Security Report: safewa.duckdns.org - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/abb72f15-2cd7-4bb5-93c7-9ffabcd13988 Domain and IP registration (RDAP)/api/v1/rdap/abb72f15-2cd7-4bb5-93c7-9ffabcd13988How often this domain was scanned/api/v1/domain/stats/safewa.duckdns.org Scan history for this domain/api/v1/domain/history/safewa.duckdns.org?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is duckdns.org and was registered 13 years ago.

Submitted URL: http://safewa.duckdns.org/opt-out/6DjMWM19393nhyr825emjblcasgl77FCMYGLQGJRWYGVH269049GUYK4125R1

The Cisco Umbrella rank of the primary domain is #76,811 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 70%

Risk Score

Email opt-out form on a free dynamic-DNS host whose title claims the unrelated domain drewfowler.com, backed by multiple HIGH dynamic-DNS IDS alerts. No password or payment fields, but the deceptive host/title mismatch and disposable hosting warrant avoiding it.

Risk Factors (5)

Domain/host mismatch: title and content pose as drewfowler.com while served from safewa.duckdns.org

Free dynamic DNS hosting frequently used for short-lived abusive pages

High-entropy random URL path on a free subdomain

Multiple HIGH network IDS dynamic-DNS alerts tied to the host

Email-harvesting form on a page that claims to belong to a different domain

Domain age information unavailable

Details

Page Title

Unsubscribe - drewfowler.com

Scan Type

public

Domain Name Analysis

Domain 'safewa.duckdns.org' uses the non-profit oriented generic top-level domain (.org) with subdomain 'safewa'. Count 7 characters in 'duckdns' split between 1 vowel and 6 consonants. Splitting it apart reveals 2 words: duck, dns. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.38s

Total Load Time

35 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:169 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	84.252.101.181	Moscow, Moscow, Russia	AS213220Delta Ltd
2	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
4	2	-	-

Detected Technologies2

JQueryv3.6.0

100%

jQuery CDN

20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19D41FE1A3CF510C0525372B86EEB8A0438209A1B7E06994934DC82A9DFD4F2DDCA3ACC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:n8xQkHr+jkMYRResBEHXvr+yV6svCZKrC:nUQkL+PYXhe/KygSCQrC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2439:iABEAAAAAAABAQgACAAIQgAEIAIQgAABCCAgCCAAECKACAAMAACgAAAAAEEAMgAAAAgCAJiEADABiIAAAAAAAgYkABAAEIQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00182424243c0000

Perceptual Hash:932c2c93b36cccb3

Difference Hash:0020444868681400

Wavelet Hash:03033f27273f0f0f

Color Hash:#6d2d86

Other Hashes

Crop Resistant:0020444868681400

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: safewa.duckdns.org