Security Scan Report: brwlstart-redirect.netlify.app

Redirected to:
https://brwlstrs.netlify.app/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 2 countries across 10 domains to perform 31 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://brwlstart-redirect.netlify.app

Effective URL:
https://brwlstrs.netlify.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 78%

9
Risk Score

Netlify redirect funnel for a fake 'Brawl Stars Generator' game-currency lure. Both the primary and entry subdomains carry phishing threat-intel hits; no forms, but the scam pattern and cloaking are clear.

Risk Factors (5)
Fake game-currency 'generator' claim impersonating Brawl Stars (Supercell brand) on an unrelated hosting subdomain
Content-malware phishing Indicators of Compromise on the primary domain and on the entry domain
Multi-hop redirect funnel across two separate flagged netlify.app subdomains
Differential content served to datacenter scanner vs. residential client (cloaking/bot-protection bypass)
Unranked shared-hosting subdomains with no attributable creation date
Domain age information unavailable

Details

Page Title

Redirect

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'brwlstart-redirect.netlify.app' is registered with subdomain 'brwlstart-redirect'. Count 7 characters in 'netlify' split between two vowels and five consonants. Splitting it apart reveals 3 words: net, li, fy. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://brwlstart-redirect.netlify.app

Page Load Overview

2.08s
Total Load Time
401 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

Text Length:489 chars
Detector Agreement:67%

Website Classification

Primary Category

entertainment media61% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
61%
technology software
33%
gambling betting
31%
cryptocurrency blockchain
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
535.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
263.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
2104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
218.64.181.173Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
23.160.156.147Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
218.64.16.120Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
218.64.181.92Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3114--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13531705F30C7501A166255292B8F7204F866958FAE8E8C40B8DF47D40FA6B2A40FBFDD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hRPhKTGh1WEFaDaY5C/reCIfn587DoRRBkCdN0xJUoU55kK7Jox4NHl:TPcTGhwEFaDaeC/af587DolQFmb2eNHl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1473:AAKAQAAQAAAAAQAAAAAIAAAACAAAAAAYAECAAgEAkgBBAAAIAAAAAAAAAAQAABAAAoIRAAAAwAAEgIEQIAAAAAAACAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:83030707070f3fff
Difference Hash:8000000000000000
Wavelet Hash:70f0f0f0f0f0f0f0
Color Hash:#6a2d86

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data