Security Scan Report: superlative-fox-19a139.netlify.app

Redirected to:
https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 4 domains to perform 12 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://superlative-fox-19a139.netlify.app/feds.html

Effective URL:
https://accounts-dk-redirection.91-218-65-223.plesk.page/davs.php
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Anonymous Netlify page redirecting to an IP-literal 'accounts-dk-redirection' plesk.page host running an AES cookie-challenge gate — classic phishing redirector shape. Final page is a dead 'File not found' with no forms captured, so no live credential harvest was observed.

Risk Factors (5)
Deceptive hostname with embedded IP address and 'accounts'/'redirection' wording
Cross-domain redirect from anonymous Netlify subdomain to unrelated IP-based plesk.page host
slowAES / aes.js cookie-challenge anti-bot cloaking script
Intermediary hops through free-hosting and short-link domains associated with abuse
Entry point flagged by Netlify phishing-landing hunting signatures
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'superlative-fox-19a139.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'superlative-fox-19a139'. The registrable portion 'netlify' spans 7 characters containing 2 vowels alongside five consonants. It segments into 3 words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://superlative-fox-19a139.netlify.app/feds.html

Page Load Overview

0.88s
Total Load Time
27 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Text Length:1 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
591.218.65.223Frankfurt am Main, Hesse, Germany
AS44486SYNLINQ
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1108.138.7.65Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1185.27.134.55United Kingdom
AS34119Wildcard UK Limited
1172.67.165.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1108.138.7.106Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1108.138.7.5Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
128--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CCF047B702C03804477CC0957BE67248F133B2C7D54449C2B1AF2A971761B1571DBF49

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hPa0hKxrdf7SBwsXl4Z5imYkhPx2sc6baMn5C/rOGMxCadPzNZErfSdPOPGb:hPa0hKTGh1WbZbaY5C/r/MxCadPJZEuh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:616:AAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAQAAAABAAAAAAAQEAAAAAAAAAAAQIAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:8707070f0f0f1f1f
Difference Hash:8000000000000000
Wavelet Hash:40c0c0c000000000
Color Hash:N/A

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data