Security Scan Report: 99075www.www.www.status.admin.www.18-235-58-082.plesk.page

Redirected to:
https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S2...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 7 domains to perform 25 HTTP transactions. The main domain is plesk.page and was registered 6 years ago.

Submitted URL: https://99075www.www.www.status.admin.www.18-235-58-082.plesk.page/auth/oidc/google

Effective URL:
https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S2...
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Credentials are entered on Google's genuine accounts.google.com OAuth page for vpn.phil.us, not on the odd plesk.page host. No phishing or malware signals, but the obfuscated entry subdomain makes the redirect origin unexplained — verify you intended to sign in to phil.us.

Risk Factors (3)
Login flow was reached from a nonsensical, heavily padded subdomain on a free/instant shared-hosting namespace rather than from phil.us itself, which is a common wrapper/hand-off pattern
Entry domain's registration date and ranking belong to the plesk.page platform, not to this page, so its age and reputation are unknown and cannot be treated as trustworthy
Unusual cross-domain redirect chain (odd plesk.page host → accounts.google.com) with no visible explanation of why the flow originates there
Safety Factors (4)
Entry point redirects to Google's real authentication domain (accounts.google.com), which collects the credentials itself
The only password/email form on the served page is Google's own OAuth sign-in form, not a third-party imitation
No Indicators of Compromise, no Safe Browsing hit, no JavaScript malware signatures and no network IDS alerts
Page content is a standard, unmodified Google Accounts sign-in screen with normal Google help/privacy links and language selector
Domain age information unavailable

Details

Page Title

Sign in - Google Accounts

Scan Type

public

Domain Name Analysis

The domain '99075www.www.www.status.admin.www.18-235-58-082.plesk.page' uses the .page top-level domain with subdomain '99075www.www.www.status.admin.www.18-235-58-082'. The second-level label 'plesk' is 5 characters long holding 1 vowel versus 4 consonants. Segmentation suggests 2 words: pl, esk. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://99075www.www.www.status.admin.www.18-235-58-082.plesk.page/auth/oidc/google

Page Load Overview

2.86s
Total Load Time
886 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:977 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network28% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5142.251.127.84Google · CDNUnited States
AS15169Google LLC
218.235.58.82Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2142.251.20.102Google · CDNUnited States
AS15169Google LLC
2142.251.13.139Google · CDNUnited States
AS15169Google LLC
2142.251.155.119Google · CDNUnited States
AS15169Google LLC
2142.251.20.139Google · CDNUnited States
AS15169Google LLC
2142.251.13.113Google · CDNUnited States
AS15169Google LLC
2142.251.152.119Google · CDNUnited States
AS15169Google LLC
2511--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10345A4CF9230A03FFD73A4B6E990ED4EF2884DD1E64A4676BC71A91342EE5A61751330

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:uCrq3j6/8+Oq3j6/8+Iq3j6/8+tq3j6/8+eq3j6/8+BIsQISNt1/HRoycXqo6/8F:uCKItRoyc6jTb3XiF//TMU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1273609:grNl0gw8TFUBZkCJUoImhMILCAECgAQEkhGAsEAgFGOABExWACVAkcbrAEMGtWQomoQMYBqwAURl06wYSJAqKswAEg1ETQgF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c3e78380000
Perceptual Hash:ce963169c2b6c9c9
Difference Hash:0000602443630400
Wavelet Hash:cccc7e5efabe0000
Color Hash:#40bf51

Other Hashes

Crop Resistant:0000602443630400

Scan History

Scan history not available

Unable to load historical scan data