Security Scan Report: sidorovsems2_gmail_com-dot-mmmetrics2.appspot.com

Redirected to:
https://sidorovsems2_gmail_com-dot-mmmetrics2.appspot.com/redirect.htm...
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 3 HTTP transactions. The main domain is appspot.com and was registered 21 years ago.

Submitted URL: https://sidorovsems2_gmail_com-dot-mmmetrics2.appspot.com/em_ok1zocFq3upBGzvmte3v?url=https%3A%2F%2Fwebsite.proctorbayley.workers.dev%2F&key=c7e37e3a96de3e9e14848c895698f4165961c395

Effective URL:
https://sidorovsems2_gmail_com-dot-mmmetrics2.appspot.com/redirect.htm...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

Deceptive redirect page on appspot.com claims to block redirection but funnels to a disposable workers.dev host, a likely multi-step phishing lure.

Risk Factors (5)
Deceptive security warning that contradicts its own action (offers link after claiming to block it)
Funnels users to a throwaway hosting namespace (workers.dev)
Email-address-containing subdomain typical of phishing kits
Hosted on a shared platform (appspot.com) where subdomain age cannot be verified
Open redirect parameter visible in the URL
Safety Factors (5)
No credential or payment forms on this page
No JavaScript malware patterns detected
No threat-intel matches or Indicators of Compromise
No network IDS alerts
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 6 to 5
Domain age information unavailable

Details

Page Title

Redirect Notice

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'sidorovsems2_gmail_com-dot-mmmetrics2.appspot.com' is registered; it also runs on subdomain 'sidorovsems2_gmail_com-dot-mmmetrics2'. Its registrable label 'appspot' stretches across 7 characters split between two vowels and 5 consonants. Tokenizing the label suggests 2 words: app, spot. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sidorovsems2_gmail_com-dot-mmmetrics2.appspot.com/em_ok1zocFq3upBGzvmte3v?url=https%3A%2F%2Fwebsite.proctorbayley.workers.dev%2F&key=c7e37e3a96de3e9e14848c895698f4165961c395

Page Load Overview

0.22s
Total Load Time
3 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:305 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical43% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
43%
corporate business
34%
government public service
32%
technology software
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3142.251.20.153Google · CDNUnited States
AS15169Google LLC
0185.140.209.232Amsterdam, North Holland, Netherlands
AS56630Melbikomas UAB
0142.251.13.153Google · CDNUnited States
AS15169Google LLC
0188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
34--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1244186DBA5D320934353723929EE6249B366D00B130E8418BE6C5264AF4E739D6A3ECC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:/S2+P17ac5VmtlFxkU5z22NBMKi8ghaomkL5AIz76cj:/S2M15+lHzlMKi8/USIfnj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2267:AAYAAAAAAICFAAQAAQAIEBAAgEIEwAQAIAAAEpAgCEIAIABAACAAEIAAAAACAACAAIAAwAgAAAgIAAAAAREACQEIBAcAECAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:001fffffffffff00
Perceptual Hash:8e1f0e9d2be161e1
Difference Hash:f060000000000000
Wavelet Hash:001ff0f0c3c3c300
Color Hash:07000600030

Other Hashes

Crop Resistant:f060000000000000

Scan History

Scan history not available

Unable to load historical scan data