Security Scan Report: threestarcrm.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is threestarcrm.com and was registered 7 years ago.

Submitted URL: https://threestarcrm.com/occ8/pui/boxMrenewal.php

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised legitimate domain hosting a mail-verification phishing page that harvests mailbox passwords; Safe Browsing social engineering hits and CRITICAL ET PHISHING alerts confirm credential theft. Never enter credentials.

Risk Factors (5)
Credential-harvesting password form masquerading as a mailbox sign-in
Google Safe Browsing social engineering detections (3)
CRITICAL network IDS phishing landing page alert
Three HIGH network IDS mailbox/mail verification phishing alerts
Phishing page hosted on a well-established domain, indicating the site is likely compromised or abused
Domain age information unavailable

Details

Page Title

Mail Verification

Scan Type

public

Domain Name Analysis

You're looking at domain 'threestarcrm.com' on the commercial generic top-level domain (.com) with no subdomain. The core label 'threestarcrm' covers 12 characters with three vowels and nine consonants. It segments into 4 words: three, star, cr, m. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://threestarcrm.com/occ8/pui/boxMrenewal.php

Page Load Overview

1.33s
Total Load Time
35 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:70%
Script:Latin
Direction:ltr

Detection Details

Text Length:81 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical46% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
46%
government public service
46%
news media journalism
38%
adult content
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
269.49.234.95United States
AS19871Network Solutions, LLC
1198.185.159.145Squarespace · CLOUDUnited States
AS53831Squarespace, Inc.
1198.185.159.144Squarespace · CLOUDNew York, New York, United States
AS53831Squarespace, Inc.
43--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A73142E1F50848367491CD6BB202FFC76477A1051222452429E2A83EE2CB8F0DF7A3E9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kr0fJNsVh6IRoSKs8tl9VU3yqnIGImCNblrYV03c3y2GtIQYVaupZ0iuUcJPM9PI:nJN8lRou8T9C3yQImCnr93syN7voEzSo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1531:AEEAAAQAAQAEASAEAAAAQBBAAAKAAAAAAgKAAAAEIBAgIAgAAAQAAAQAQEAACAACAAQAkAAAAACCAAAIAAIAAIIECAgAAIAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7ffffffffff
Perceptual Hash:b333999999266666
Difference Hash:080c0c0800000000
Wavelet Hash:e4e4e4e4f0f0f0f0
Color Hash:#d22d9b

Other Hashes

Crop Resistant:080c0c0800000000

Scan History

Scan history not available

Unable to load historical scan data