Security Scan: http://superlative-fox-19a139.netlify.app/fed

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c5bf19f3-f6a0-48af-a9c8-41f6c0b00ad0 Domain and IP registration (RDAP)/api/v1/rdap/c5bf19f3-f6a0-48af-a9c8-41f6c0b00ad0How often this domain was scanned/api/v1/domain/stats/superlative-fox-19a139.netlify.app Scan history for this domain/api/v1/domain/history/superlative-fox-19a139.netlify.app?limit=15

This website contacted 8 IPs in 3 countries across 5 domains to perform 13 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://superlative-fox-19a139.netlify.app/feds.html

Effective URL:

https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Suspicious redirect chain from a throwaway Netlify subdomain to an IP-labelled Plesk host ('accounts-dk-redirection') with slowAES cookie-challenge cloaking; page currently serves 'File not found.' No credential form captured.

Risk Factors (5)

Multi-hop redirect across unrelated registrable domains ending on an IP-addressed Plesk subdomain running a PHP endpoint

Deceptive 'accounts-dk-redirection' hostname implying an account/redirection flow

slowAES cookie-challenge header generation (evasion/cloaking infrastructure)

Random free-hosting infrastructure (Netlify throwaway subdomain, infinityfree.io resources)

Information-only IDS tags for 'Suspicious Netlify Hosted ... Possible Phishing Landing' corroborate the pattern

Safety Factors (6)

No forms present in the captured DOM: 0 password, 0 disguised-password and 0 payment fields

No JavaScript malware patterns (hunting rule) and no credential exfiltration detected

No visible brand impersonation — the only rendered text is 'File not found.'

Threat-intel match on 185.27.134.55 is a third-party resource address with a generic abuse-reputation tag, not content-malware evidence

No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Favicon Hash

MMH3: -614457039

MD5: 650b28c6cf1b473aed15ba26bad1da92

Domain Name Analysis

The domain 'superlative-fox-19a139.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'superlative-fox-19a139'. The second-level label 'netlify' is 7 characters long containing 2 vowels alongside five consonants. Breaking it apart gives 3 words: net, li, fy. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.24s

Total Load Time

28 KB

Total Size

Language Analysis

Primary Language

🏳️UNKNOWN

Code: unknown

Confidence:0%

Detection Details

Text Length:1 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	91.218.65.223	Frankfurt am Main, Hesse, Germany	AS44486SYNLINQ
1	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	108.138.7.5Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	185.27.134.55	United Kingdom	AS34119Wildcard UK Limited
1	172.67.71.120Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	108.138.7.65Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	104.26.9.174Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
13	8	-	-