Security Scan Report: xn--btrefill-l2a.com

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 7 domains to perform 51 HTTP transactions. The main domain is xn--btrefill-l2a.com and was registered 2 months ago.

Submitted URL: https://xn--btrefill-l2a.com

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Google's Swedish search/consent interface is served from a 60-day-old punycode domain unrelated to Google — brand impersonation. No credential form was verified, but do not sign in or enter data here.

Risk Factors (4)
Impersonation of another entity's brand (Google branding on a domain Google does not own)
Title/domain mismatch on a 60-day-old, unranked domain
Punycode hostname that obscures the real domain name in the address bar
HIGH-severity IDS alert for Spamhaus DROP-listed traffic
Domain age information unavailable

Details

Page Title

Googleother network

Scan Type

public

Domain Name Analysis

The domain name 'xn--btrefill-l2a.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'xn--btrefill-l2a' is 16 characters long with 3 vowels and 9 consonants, notching 1 digit and three hyphens. Segmentation suggests six words: xn, bt, refill, l, 2, a. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

°C) Logga in Innan du fortsatter till Google Vi anvander cookies och data, inklusive IP-adresser, for att % _leverera och underhalla Googles tjanster A. spara avbrott och skydda mot spam, bedrageri...

Page Load Overview

N/A
Total Load Time
1018 KB
Total Size

Language Analysis

Primary Language

🇸🇪Swedish
Code: sv
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:sv
Text Length:3,412 chars
Detector Agreement:100%

All Detected Languages

🇸🇪sv(96%)🇺🇸en(3%)🇪🇸es(1%)

Website Classification

Primary Category

adult content42% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
42%
corporate business
37%
documentation technical
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9142.251.155.119Google · CDNUnited States
AS15169Google LLC
762.60.226.163Frankfurt am Main, Hesse, Germany
AS214351Femo It Solutions Limited
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7192.178.183.141Google · CDNUnited States
AS15169Google LLC
7142.251.156.120Google · CDNUnited States
AS15169Google LLC
7142.251.13.95Google · CDNUnited States
AS15169Google LLC
7142.251.154.7Google · CDNUnited States
AS15169Google LLC
07--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T100747D317300B83FB923DAA061BBAF4E3C35E15BDD0A45B8A595E5709FF2DB2142265C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:4Cb157pz+byGEX5A7AJKJZNGHt2eBxSsL6yIP1Xdf4ojKJZzN:hbv1z+bNEX5UAEJZNGHHBxayIHaJZh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:346332:CpVWQjwVFKCQpgERjyAvGWiqLgnjiEQdgAQEIaY4RGUBw5OAjGDCAQoIKcExAIYEQlAETTE0gxSioYVwLDxBOGwBKg5BTaKQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c3c3c3c3c3c18
Perceptual Hash:9bd9646465737451
Difference Hash:6869697969696969
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:070000001c0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data