Security Scan Report: 2whm.whm.update.au.152-53-37-155.plesk.page

Redirected to:
https://2whm.whm.update.au.152-53-37-155.plesk.page/s
Site favicon
Submitted: Completed: publiccompleted
This website contacted 28 IPs in 2 countries across 21 domains to perform 86 HTTP transactions. The main domain is plesk.page and was registered 6 years ago.

Submitted URL: http://2whm.whm.update.au.152-53-37-155.plesk.page/s

Effective URL:
https://2whm.whm.update.au.152-53-37-155.plesk.page/s
Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

4
Risk Score

Unblocked-games/proxy page with deliberate tab-cloaking, about:blank and panic-key evasion features and a Google-disguised tab title, but no forms, credentials, or malware/IoC evidence. Deceptive rather than overtly fraudulent.

Risk Factors (4)
Tab-title/icon spoofing and about:blank + panic-key functionality built specifically to hide the page from filtering/monitoring
Page disguises itself as Google (tab title 'Google', Google Search look) while hosted on an unrelated shared-hosting subdomain
Content and links ('Exploit Corner', Discord distribution) are of unverified origin and cannot be validated
Host on a shared Plesk namespace with an IP-embedded, unreputable hostname; no ranking in Cisco Umbrella top 1M
Safety Factors (4)
No forms of any kind — no credential, login or payment collection
No Indicators of Compromise, no JavaScript YARA malware, no high-precision native YARA hits and no network IDS alerts
No cross-origin credential exfiltration and no obfuscated JavaScript network sinks detected
Third-party scripts observed are ordinary CDN/font/analytics hosts (jsdelivr, Google Fonts, Font Awesome)
Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Domain Name Analysis

Within the .page top-level domain, '2whm.whm.update.au.152-53-37-155.plesk.page' is registered; it also runs on subdomain '2whm.whm.update.au.152-53-37-155'. Count 5 characters in 'plesk' split between one vowel and four consonants. Tokenizing the label suggests two words: pl, esk. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://2whm.whm.update.au.152-53-37-155.plesk.page/s

Page Load Overview

3.12s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,000 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network52% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
52%
entertainment media
51%
technology software
35%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5152.53.37.155Manassas, Virginia, United States
AS214996netcup GmbH
3142.251.13.95Google · CDNUnited States
AS15169Google LLC
3140.82.121.5Frankfurt am Main, Hesse, Germany
AS36459GitHub, Inc.
3192.178.183.97Google · CDNUnited States
AS15169Google LLC
3142.251.20.94Google · CDNUnited States
AS15169Google LLC
3104.21.26.223Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3216.239.32.36Google · CDNUnited States
AS15169Google LLC
8628--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195E33FF5D24C10D67336C84BAB45B3BC65B6F739D9810C65F12F680C1EC2AA922C6F69

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:sKiYurv4FmMCMPMCMjMCM4MCMwMCM3sVMH709gbPMfjSFOTyPGuGprrlCa3pyPTs:agb709gMGFiyPGuGprlCC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:147681:pmtAAAJ9AqTRr21EDqACHABAwfICA0wDkBQoLaAxqyAFkZIcJKUECdgA4F8ABkBwcRELVAkqAEwHgAUkegRIsM4LyTRABmiA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:99ffd1819fc19999
Perceptual Hash:e8f2c9929c6c6c9c
Difference Hash:31d9073335233333
Wavelet Hash:99ff81819f819999
Color Hash:#99ac53

Scan History

Scan history not available

Unable to load historical scan data