Security Scan Report: awesome-joliot.193-26-115-70.plesk.page

Redirected to:
https://awesome-joliot.193-26-115-70.plesk.page/login_up.php
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 3 countries across 1 domain to perform 2 HTTP transactions. The main domain is plesk.page and was registered 6 years ago.

Submitted URL: https://awesome-joliot.193-26-115-70.plesk.page

Effective URL:
https://awesome-joliot.193-26-115-70.plesk.page/login_up.php
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Legitimate Plesk Obsidian login page on a shared-hosting subdomain, but the hosting IP triggers a Spamhaus DROP IDS alert and a single-source generic abuse-reputation report; no phishing content or credential exfiltration detected.

Risk Factors (2)
HIGH-severity network IDS alert: ET DROP Spamhaus DROP Listed Traffic Inbound group 46
Host IP reported as known attacker in a single-source, unverified threat-intel feed (generic abuse reputation)
Safety Factors (4)
Self-branded Plesk login page: domain and title both match the Plesk brand
Login form posts same-origin; no credential exfiltration or cross-origin form targets detected
No payment fields, no disguised password fields, no cross-origin JavaScript network targets
No hunting rule malware patterns, no native-hunting rule high-precision hits, no known malicious kit in roster
Domain age information unavailable

Details

Page Title

Plesk Obsidian 18.0.82other network

Scan Type

public

Domain Name Analysis

Domain 'awesome-joliot.193-26-115-70.plesk.page' uses the .page top-level domain, featuring subdomain 'awesome-joliot.193-26-115-70'. The second-level label 'plesk' is 5 characters long split between one vowel and 4 consonants. Splitting it apart reveals two words: pl, esk. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://awesome-joliot.193-26-115-70.plesk.page

Page Load Overview

75.10s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:449 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software46% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
46%
cryptocurrency blockchain
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2193.26.115.70Bucharest, Bucharest, Romania
AS2105581337 Services GmbH
034.246.208.147Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
034.8.226.60Google · CDNKansas City, Missouri, United States
AS396982Google LLC
23--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D9B3081A48183F3B07C723E37C973589BAB48195A1D11050A9EE856D07EEFDEE12F16B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:dgcQ+pbNlvU3jIv4CHFje8LzGXSyDjyto6j2Z7nm6xzw2NSZ/rQP8GWOz1Btip:WcQ+pbNlvlBljGXlPB6jc7nXU/rfGV1G

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:111391:BTQAKbIqAClKQMKAhA4JhAIB1QBBhpVA4o2liRMkAxYGRA1SaDDsQqCBMGtlTBEAkmA0AyCBgQJoAFtkzRRRlIBAAbgdEohB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018011818181800
Perceptual Hash:886667cc743633b3
Difference Hash:61730db3b3b3b34d
Wavelet Hash:0018011939393931
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data