Security Scan Report: hostinger-mail-ewgjnwrkgnkrw-rytcytajlrzfhyfzwajxbeqp.pages.dev

Redirected to:
https://mail.hostinger.com/auth/login?redirect=%2F%3F_task%3Dmail%26_m...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 1 country across 8 domains to perform 116 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://hostinger-mail-ewgjnwrkgnkrw-rytcytajlrzfhyfzwajxbeqp.pages.dev/

Effective URL:
https://mail.hostinger.com/auth/login?redirect=%2F%3F_task%3Dmail%26_m...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Free-hostname pages.dev page matching an analyst-vetted multi-brand phishing kit (hostinger-mail cohort) with CRITICAL IDS heap-spray/obfuscation alerts and a password form impersonating Hostinger Mail. Do not enter credentials.

Risk Factors (6)
Known malicious phishing kit fingerprint (jg.js + js1.js) tied to this host
CRITICAL IDS heap-spray/shellcode alert
HIGH IDS hex-obfuscated script and unescape alerts
14 eval() calls executing obfuscated JavaScript
Password + username form impersonating Hostinger Mail on a non-Hostinger pages.dev domain
Evaluated host is a free instant-subdomain tenant with unknown actual creation date
Domain age information unavailable

Details

Page Title

Hostinger Mail

Scan Type

public

Domain Name Analysis

You're looking at domain 'hostinger-mail-ewgjnwrkgnkrw-rytcytajlrzfhyfzwajxbeqp.pages.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'hostinger-mail-ewgjnwrkgnkrw-rytcytajlrzfhyfzwajxbeqp'. The registrable portion 'pages' spans 5 characters split between two vowels and 3 consonants. Word splitting yields one word: pages. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hostinger-mail-ewgjnwrkgnkrw-rytcytajlrzfhyfzwajxbeqp.pages.dev/

Page Load Overview

1.72s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:14 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24172.66.47.91United States
AS13335Cloudflare, Inc.
23104.17.132.104United States
AS13335Cloudflare, Inc.
23104.16.210.83United States
AS13335Cloudflare, Inc.
23104.18.94.41United States
AS13335Cloudflare, Inc.
23142.251.13.95United States
AS15169Google LLC
1165--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D2E2C723AE54162F3113C79DB390F58593316A018F16B3B7F96453B49F8D19E2A6338B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:5xZFqvLh8Oh8XMVk9vjaKObveaIFEmLJkxZCJaqI71HIG5ed1HQaw:BwDmsSaKObveaIFEmLJkxZCJE8XDw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34031:Eu9uIQhEUDEFABgSwYoCjBwAIRYLUQBVICBtBwAAFoODBicSQ4GjAEAIYBKFWGAoJoLVATUEySTO3AKSiJhqCgAQhsElAdT7

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc3c7c3c3c7ff
Perceptual Hash:b139cbc4c3cc64ce
Difference Hash:181c161e1e161608
Wavelet Hash:fec6c2c6c2c2c2e6
Color Hash:#2d8386

Other Hashes

Crop Resistant:181c161e1e161608

Scan History

Scan history not available

Unable to load historical scan data