Security Scan Report: remittance-jg-wentworth.surge.sh

Submitted: Jun 26, 2026, 3:55:03 PMCompleted: Jun 26, 2026, 3:56:20 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is remittance-jg-wentworth.surge.sh and was registered NaN years ago.

Submitted URL: https://remittance-jg-wentworth.surge.sh/[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

The site hosts a credential‑phishing login that exfiltrates data to an external server and impersonates a financial brand; treat as confirmed scam.

Risk Factors
Brand impersonation on a hosting‑platform subdomain
Credential exfiltration to external server
Unknown subdomain age
Login form collecting credentials
Domain age information unavailable

Details

Page Title

Wentworth Remittance

Scan Type

public

Language

🇺🇸

English

(58% confidence)

Category

finance banking

(72%)

Domain Information

The domain name 'remittance-jg-wentworth.surge.sh' uses the .sh country-code top-level domain, featuring subdomain 'remittance-jg-wentworth'. The registrable portion 'surge' spans 5 characters containing two vowels alongside three consonants. Splitting it apart reveals 1 word: surge. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://remittance-jg-wentworth.surge.sh/?email=richard@anus.se

Page Load Overview

0.58s
Total Load Time
2
HTTP Requests
1
Domains
8 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:58%
Script Type:Latin
HTML Lang Attribute:zh-CN
Text Length:178 chars
Detector Agreement:100%
Language mismatch: Declared as zh but detected as en

Website Classification

Primary Category

finance banking72% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
72%
government public service
34%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2138.68.112.220Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
21--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B922934629F314566943A0743BE7161A3334D003D546CCB87F9C532C9F89E9AADB3B8D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:UXk1rihF+ZTf3TRXBDwQyJbEt1NgzWWOim2tyeXNRb:CYIEtfm/FJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10449:DKAAAhGyJDYMaohQMIFpFSKnEjAZU7AIIAygIqBBAYAH0gUoCSigwAISFCAbS1VhQCHMCEILTBgCAQQg5ks+VLAUuXQCUypA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181838180000
Perceptual Hash:99cc6633996ccc33
Difference Hash:0014b2b2b2b20420
Wavelet Hash:3c003c3cfcfcc0fc
Color Hash:#1f2393

Other Hashes

Crop Resistant:0014b2b2b2b20420

Scan History

Scan history not available

Unable to load historical scan data