Security Scan Report: escort.club.anons1582673.pl

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 6 domains to perform 44 HTTP transactions. The main domain is anons1582673.pl and was registered 2 weeks ago.

Submitted URL: https://escort.club.anons1582673.pl/

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Recently registered Polish escort classifieds portal with its own same-origin login form. No impersonation, exfiltration or malware indicators found; risk stems only from the very young domain and unverified adult-service account registration.

Risk Factors (3)
Very new domain (14 days old) collecting account credentials via a login/registration form
Unvetted adult classifieds portal inviting users to register and submit personal data
Generic login page title with no descriptive identity beyond the domain
Safety Factors (5)
Login form posts to the same domain (zapis.php), not to a foreign origin
No credential exfiltration, obfuscated script sink, or hidden password field detected
No threat-intelligence, YARA, IDS or Safe Browsing findings
Page presents its own brand consistent with the domain rather than impersonating another company
CAPTCHA challenge present on the login form; third-party assets loaded from ranked CDNs (jQuery, Font Awesome, Google Fonts)
Domain age information unavailable

Details

Page Title

Logowanie/Rejestracja

Scan Type

public

Domain Name Analysis

You're looking at domain 'escort.club.anons1582673.pl' on the Polish country-code top-level domain (.pl) and includes subdomain 'escort.club'. The registrable portion 'anons1582673' spans 12 characters containing two vowels alongside three consonants, along with 7 digits. Breaking it apart gives two words: anons, 1582673. Median word length is six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://escort.club.anons1582673.pl/

Page Load Overview

2.09s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl
Text Length:1,205 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content87% confidence
Type: webapp
Method: ml+structural

All Detected Categories

adult content
87%
government public service
46%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
983.168.99.220Poland
AS214349Nodea Spolka Z Ograniczona Odpowiedzialnoscia
5167.104.221.114Amsterdam, North Holland, Netherlands
AS197569Based On What LLC
5104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
5167.104.221.14Amsterdam, North Holland, Netherlands
AS197569Based On What LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
5142.251.20.94Google · CDNUnited States
AS15169Google LLC
448--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T190F2C8D250F6112B045396C28BA92B2D7FE2A117D287450572BC0FED9FDBE87B80366D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:7hZSHPW8uuugv9/EHPYH+F8nsOt1QJLMe/:7hZ4tuubvNKYH+F8nsOt1QlMM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:37047:RhmGABahAihQD0RDIjOyIkVRmjDN0FCCAVKmKQYZPTQEUjSBbJgKLBBTAACeIFIGByKRQCEqJQgiHAIsSAVAoRqIhnBiLECY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff080c00080808
Perceptual Hash:9996e4ede619920d
Difference Hash:0119d9f9f99b93d3
Wavelet Hash:ffff0c1c080808ff
Color Hash:#2dd24e

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data