Security Scan Report: userservicenetfiixsav.com

Redirected to: https://en.wikipedia.org/wiki/Main_Page

Site favicon
Submitted: Nov 5, 2025, 12:51:19 AMCompleted: Nov 5, 2025, 12:54:59 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 64 HTTP transactions. The main domain is en.wikipedia.org and was registered NaN years ago.

Submitted URL: https://userservicenetfiixsav.com/

Effective URL: https://en.wikipedia.org/wiki/Main_PageRedirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

New, unranked domain impersonating Wikipedia and collecting donations – confirmed phishing scam.

Risk Factors
Brand‑new domain (<7 days) with payment collection
Brand impersonation (Wikipedia) on a suspicious domain
Multiple redirects ending at a different domain
Unranked domain with no established reputation
Payment form hosted on a non‑official site
Domain age information unavailable

Details

Page Title

Wikipedia, the free encyclopedia

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

e-commerce

(50%)

Domain Information

Within the commercial generic top-level domain (.com), 'userservicenetfiixsav.com' is registered and has no subdomain. Count 21 characters in 'userservicenetfiixsav' split between 9 vowels and 12 consonants. Word splitting yields six words: user, service, net, fi, ix, sav. The median word length lands at 3 characters. Most frequently, 'user' shows up in French. Secondary signals appear in English and Portuguese (Brazil). Taken together, it feels French.

Screenshot

Security scan screenshot of https://userservicenetfiixsav.com/

Page Load Overview

0.98s
Total Load Time
64
HTTP Requests
5
Domains
624 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:18,186 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce50% confidence
Type: webapp
Method: structural

All Detected Categories

e-commerce
50%
forum
40%

Detected Features

Search
Payment
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
32185.15.59.240United States
AS14907WIKIMEDIA
22185.15.59.224United States
AS14907WIKIMEDIA
122a02:ec80:300:ed1a::2:bUnited States
AS14907WIKIMEDIA
122a02:ec80:300:ed1a::1United States
AS14907WIKIMEDIA
6158.94.209.88United States
AS209800metaspinner net GmbH
645--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E954A6B262031C3E672357DFE5D63F289093A269D6F33951BBAC527B22C7D30691610B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:cocDB87xGvwxanHnD+6tI2YkmL7kVKb2U7D46eA4iO3fjmuSh:f8Hn66thnmcV82q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:281348:hEiDwbVGoBjVEAAVCCEEbpaPOoEpIkMAhEAIiCgjYhx1CwqiJACQcgFrDFDSEHigwIkGJAIABhixAAADjUBxiBEAJhBCCM0M

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffef838383878383
Perceptual Hash:bdccf390290f0eb2
Difference Hash:709a6272362e5e5a
Wavelet Hash:bfef838383838383
Color Hash:#822dd2

Other Hashes

Crop Resistant:709a6272362e5e5a

Scan History

Scan history not available

Unable to load historical scan data