Security Scan: Redirect

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bec5756e-8119-4f2f-be59-b90611ce883f Domain and IP registration (RDAP)/api/v1/rdap/bec5756e-8119-4f2f-be59-b90611ce883fHow often this domain was scanned/api/v1/domain/stats/sync-auth.at Scan history for this domain/api/v1/domain/history/sync-auth.at?limit=15

This website contacted 3 IPs in 1 country across 2 domains to perform 27 HTTP transactions. The main domain is sync-auth.at and was registered 1 month ago.

Submitted URL: https://sync-auth.at/en/verification

Effective URL:

https://www.wikipedia.org/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

sync-auth.at is a cloak-aware redirector matching an analyst-vetted Ledger device-verification phishing kit (Cloakit_NextJS_Lure_Redirector). Benign landing on Wikipedia is the decoy leg, not exculpatory.

Risk Factors (4)

Known malicious phishing kit identified by analyst-vetted roster (Ledger device-verification / Cloakit family)

Roster-anchored hunting rule Cloakit_NextJS_Lure_Redirector detected in page HTML

Traffic-cloaking redirector: scanner was served a decoy page, residential client received different content

Unranked, no legitimate identity on the entry host sync-auth.at

Domain age information unavailable

Details

Page Title

Redirect

Scan Type

public

Favicon Hash

MMH3: 857403617

MD5: 904ce6bd2ef5e1eaa6de1eb02164436b

Domain Name Analysis

Within the Austrian country-code top-level domain (.at), 'sync-auth.at' is registered and has no subdomain. The core label 'sync-auth' covers 9 characters split between 2 vowels and 6 consonants, along with one hyphen. It segments into 3 words: sync, au, th. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.66s

Total Load Time

353 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:8 chars

Detector Agreement:0%

Website Classification

Primary Category

technology software52% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

52%

education learning

45%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	172.67.159.166Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	185.15.59.224	United States	AS14907Wikimedia Foundation Inc.
9	104.21.34.111Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
27	3	-	-