ScanMalware.com

Security Scan Report: join-now-program.surge.sh

Submitted: Oct 22, 2025, 7:42:41 AMCompleted: Oct 22, 2025, 7:43:55 AMpubliccompleted
Loading additional data...

Summary

This website contacted 17 IPs in 2 countries across 4 domains to perform 9 HTTP transactions. The main domain is join-now-program.surge.sh.

Submitted URL: https://join-now-program.surge.sh/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

High‑risk phishing page impersonating Facebook; do not provide credentials.

Risk Factors
Brand impersonation/typosquatting on an unranked, likely new domain
Request for Facebook password without a legitimate login form
Unranked domain used for a high‑profile brand
Domain age information unavailable

Details

Page Title

Facebook Page Support Center

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

The domain 'join-now-program.surge.sh' uses the .sh country-code top-level domain; it also runs on subdomain 'join-now-program'. The core label 'surge' covers 5 characters holding two vowels versus 3 consonants. Word splitting yields one word: surge. Median word length is 5 characters. 'surge' most strongly signals Portuguese. Secondary signals appear in Portuguese (Brazil) and English.

Screenshot

Security scan screenshot of https://join-now-program.surge.sh/

Page Load Overview

31.82s
Total Load Time
9
HTTP Requests
4
Domains
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:2,217 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
918.172.112.35United States
AS16509AMAZON-02
0185.15.59.240United States
AS14907WIKIMEDIA
0138.68.112.220Frankfurt am Main, Hesse, Germany
AS14061DIGITALOCEAN-ASN
0157.240.0.6Frankfurt am Main, Hesse, Germany
AS32934FACEBOOK
02600:9000:2761:de00:15:c281:3500:93a1United States
AS16509AMAZON-02
02a02:ec80:300:ed1a::2:bUnited States
AS14907WIKIMEDIA
02600:9000:2761:e200:15:c281:3500:93a1United States
AS16509AMAZON-02
02600:9000:2761:ee00:15:c281:3500:93a1United States
AS16509AMAZON-02
018.172.112.78United States
AS16509AMAZON-02
02600:9000:2761:b200:15:c281:3500:93a1United States
AS16509AMAZON-02
917--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EB53B5CD16BEFE5409D7316AA34A47353250A023C516EB143EACAB459F8CE5DCA732BC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:l8QtouFQNxGT0GJLuY1CjiA0Yw3C47Tvh:CXuFHTH1C2Yw3C47Tvh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:62437:pUVDSIyIDEOxCQAEMBljEOiGfiCGcgLAiNAcoOANhhDSRDASmICCgESpBIpJmCBclgUs4IRQiAsAxrAQExmCYhMTCmAyxiRR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data