Security Scan Report: referral-link-opdl2linkd31.org

Response type:Plain texttext/plainHTTP 418The server returned plain text, not a web page. The screenshot shows the text as a browser displays it.
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is referral-link-opdl2linkd31.org and was registered 5 months ago.

Submitted URL: https://referral-link-opdl2linkd31.org/

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Non-functional page on a 158-day-old randomized domain reported as phishing, hosted on a Spamhaus DROP-listed IP. No forms or malware, but the phishing flag and hostile hosting reputation warrant avoidance.

Risk Factors (4)
Primary domain flagged as phishing by a threat-intel feed (single-source, unverified)
Hosting IP appears on a Spamhaus DROP-listed inbound traffic alert (HIGH IDS)
DGA-style random hostname with no discernible business identity
No functional content served — plain-text HTTP 418 error only
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'referral-link-opdl2linkd31.org' uses the non-profit oriented generic top-level domain (.org). The core label 'referral-link-opdl2linkd31' covers 26 characters with six vowels and 15 consonants, notching 3 digits and two hyphens. Word splitting yields 8 words: referral, link, op, dl, 2, link, d, 31. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://referral-link-opdl2linkd31.org/

Page Load Overview

0.66s
Total Load Time
180 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:176 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical53% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
53%
healthcare medical
48%
government public service
47%
news media journalism
41%
adult content
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
162.60.226.89Frankfurt am Main, Hesse, Germany
AS214351Femo It Solutions Limited
11--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C9048F77329A063986558498F05B43099F20B143F506C9BCB9BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:H/Qho9PKBbl8Vrq9Jzbs6tlg1ySBKw4Q9gcoIsPv2bMy8OldV:4hoCl8Bqzzbs6okSCggcpsH2eAv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:185313:jgMWkDQ4HZBgHyghoAARIAfAKIhAI4ARAsQYAgBANI0CnKSEAaBgYgOGRQlzYEBzkkRDUHgYJhwTLCTjaTggyZ5SQEAFIGAL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7f3ffffffff
Perceptual Hash:b1319acecc6c3333
Difference Hash:0018180600000000
Wavelet Hash:ffdfc7f300000000
Color Hash:N/A

Other Hashes

Crop Resistant:0018180600000000

Scan History

Scan history not available

Unable to load historical scan data