Security Scan Report: jordan.qunis.ru

Redirected to:
https://simcast.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 68 IPs in 5 countries across 52 domains to perform 143 HTTP transactions. The main domain is qunis.ru and was registered 2 months ago.

Submitted URL: https://jordan.qunis.ru

Effective URL:
https://simcast.com/
Redirected

The Cisco Umbrella rank of the primary domain is #903,371 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 70%

3
Risk Score

Page claims to be 'HeadlineLogic News Portal' but is reached via qunis.ru -> simcast.com redirects and carries a single-source phishing report on its own brand domain, plus credential signup forms. Verified no exfiltration, but the phishing indicator and credential collection warrant avoidance.

Risk Factors (4)
Single-source phishing threat-intel match on the page's brand domain headlinelogic.com
Credential-collection signup/login forms (email + password + confirm-password) hosted on a page reached via an unrelated redirect destination
Unrelated entry/receiving domains (qunis.ru -> simcast.com) with no reputation data for the final host
Domain monetization attribution (ParkLogic Pty Ltd) alongside scraped news content
Safety Factors (6)
No credential exfiltration detected; cross-origin form posts resolve to the page's own final domain (legitimate SSO flow)
No payment fields and no disguised-password fields per verified form facts
No JavaScript hunting rule malware patterns and no known malicious kit in the roster
No brand impersonation of a different entity detected (self-branding 'HeadlineLogic'); brand mentions are news-context references
All third-party script hosts are ranked in the top-1M popularity list
The site's own login form (credentials submit to its own domain; 8692 days old) with no strong malicious indicators — a first-party sign-in is normal; risk clamped from 7 to 3
Domain age information unavailable

Details

Page Title

HeadlineLogic News Portal

Scan Type

public

Domain Name Analysis

Domain 'jordan.qunis.ru' uses the Russian country-code top-level domain (.ru), featuring subdomain 'jordan'. The second-level label 'qunis' is 5 characters long containing two vowels alongside 3 consonants. Segmentation suggests three words: qu, n, is. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Weather Sports Ed Yahoo News Press Foundation Condemns White House Ban: ‘Blatant Violation’ Health Dining Tra See the bigger picture Explore a daily news briefing, Ed Yahoo News Trump Hails ‘In...

Page Load Overview

0.79s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,089 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism48% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
48%
adult content
25%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9172.236.114.191Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2172.234.216.100Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2198.134.116.17Garden City, New York, United States
AS27257Webair Internet Development Company Inc.
2104.18.20.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
285.184.96.0Malta
AS47171Kindred IP Limited
2172.64.144.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.19.147.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2192.178.183.95Google · CDNUnited States
AS15169Google LLC
14368--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T144B12AB17A42702E97F310D6A2BAA718363D0251350A4063E7ACFCE53C6091F5197F9A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TGIG7Wbuu9gzJVd5pAJ9/4EEi2XHVCGICfM/0Cqa4oDtEFubgRjff97BfL:at7WbuuOzJVd5pAEE3aICfe08SF5jfpx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5595:FBUQAAMEWBAgoCoEczRGEcEAACiAYCYAJACSgUSIACAAIE5lADSYAQDEAEENQxAIIhhEAACQBQEqLAYGAJAAQEBEAYYqjCiK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:b398cc663399cc66
Difference Hash:000000080c000800
Wavelet Hash:f0f0fce4243c3c3c
Color Hash:N/A

Other Hashes

Crop Resistant:000000080c000800

Scan History

Scan history not available

Unable to load historical scan data