ScanMalware.com

Security Scan Report: server-index-page--gutpunchedac.replit.app

Submitted: Completed: publiccompleted

AI Security Verdict

Low Risk

Confidence: 62%

3
Risk Score

Dead Replit placeholder page carrying a single-source phishing report on its primary domain; no forms, scripts or malware observed, but the unverified content-malware indicator on the page's own domain drives it to high risk.

Risk Factors (3)
Single-source phishing threat-intelligence match on the primary domain (unverified, poorly corroborated)
Instant/free-share hosting subdomain where anyone can publish, with an arbitrary/abusive-looking name ('gutpunchedac')
No verifiable ownership or reputation; domain not in Cisco Umbrella top 1M
Safety Factors (5)
No credential, login or payment forms present (verified form facts: 0 forms)
No JavaScript malware patterns, no native-YARA high-precision hits, no known-kit roster match
No cross-origin credential exfiltration or suspicious JS network targets
No network IDS alerts and no Safe Browsing/YARA corroboration of the phishing report
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 3
Domain age information unavailable

Details

Page Title

This app isn't live yet

Scan Type

public

Domain Name Analysis

Domain 'server-index-page--gutpunchedac.replit.app' uses the application-focused generic top-level domain (.app) with subdomain 'server-index-page--gutpunchedac'. The registrable portion 'replit' spans 6 characters holding two vowels versus four consonants. It segments into 2 words: rep, lit. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://server-index-page--gutpunchedac.replit.app/

Page Load Overview

0.72s
Total Load Time
16 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,270 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software52% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
52%
finance banking
52%
healthcare medical
50%
cryptocurrency blockchain
49%
documentation technical
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
334.117.33.233Google · CDNKansas City, Missouri, United States
AS396982Google LLC
31--

Detected Technologies4

Replit
100%
Google Cloud
50%
HTTP/3
40%
Google Cloud CDN
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T158F153AA6FD63C505243C6B46BA5A1ECDF9DEC07C70AC971349C33588F8C7C8495E688

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TxKGZodxcFJ/CmjHYf+M6hfyORfmyjGrlIM6hfyORfmyjGrT:1KeuxcFdCm02MQfzf26MQfzf2T

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8191:cYA05AAgQhRDgAYBMwiCFBIxEiAIQEURTJyEAMkhWJIEgANAUi0R8hCeAZEhxADa3IZQA/IUqeIAaYiBQAUvigBMAmRQBKkE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:996666999933cccc
Difference Hash:0008103032300800
Wavelet Hash:30303838fcfcf0f0
Color Hash:#87c5a9

Other Hashes

Crop Resistant:0008103032300800

Scan History

Scan history not available

Unable to load historical scan data