Security Scan: Plesk Obsidian 18.0.82

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c30992e9-5897-40d3-ae5a-75fa43d8406f Domain and IP registration (RDAP)/api/v1/rdap/c30992e9-5897-40d3-ae5a-75fa43d8406fHow often this domain was scanned/api/v1/domain/stats/condescending-knuth.216-109-180-249.plesk.page Scan history for this domain/api/v1/domain/history/condescending-knuth.216-109-180-249.plesk.page?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 27 HTTP transactions. The main domain is plesk.page and was registered 6 years ago.

Submitted URL: https://condescending-knuth.216-109-180-249.plesk.page

Effective URL:

https://condescending-knuth.216-109-180-249.plesk.page/login_up.php

Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Genuine-looking Plesk panel login on an auto-named *.plesk.page tenant subdomain. No impersonation, exfiltration or threat-intel hits, but the instance host and its age cannot be verified — only sign in if you were given this panel URL.

Risk Factors (2)

Credential (username/password) login form on an unranked, auto-named shared-hosting tenant subdomain whose own creation date cannot be verified

Instance subdomain is not the provider's canonical login host, so a user cannot readily confirm it is the intended Plesk panel they were given

Safety Factors (4)

Form posts same-origin to the standard Plesk login endpoint (login_up.php); no external form action, no cross-origin JS credential targets

Displays only the hosting platform's own brand on the platform's own domain — no impersonation of another company

No Indicators of Compromise, no hunting rule malware matches, no IDS phishing/malware alerts, no known malicious kit

Page content is ordinary localized Plesk login UI with cookie-consent text; no lure, urgency, or data harvesting beyond the panel login

Domain age information unavailable

Details

Page Title

Plesk Obsidian 18.0.82

Scan Type

public

Favicon Hash

MMH3: -614457039

MD5: 650b28c6cf1b473aed15ba26bad1da92

Domain Name Analysis

Within the .page top-level domain, 'condescending-knuth.216-109-180-249.plesk.page' is registered with subdomain 'condescending-knuth.216-109-180-249'. The registrable portion 'plesk' spans 5 characters holding one vowel versus 4 consonants. Splitting it apart reveals two words: pl, esk. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.89s

Total Load Time

3.5 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:553 chars

Detector Agreement:50%

Website Classification

Primary Category

government public service39% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service

39%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	216.109.180.249	United States	AS197450Sunucun Bilgi Iletisim Teknolojileri ve Ticaret Ltd. Sti.
9	34.246.208.147Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
9	34.8.226.60Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
27	3	-	-