Security Report: vpnaegis.site - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2e403aa8-056e-4a05-954e-854c565ff908 Domain and IP registration (RDAP)/api/v1/rdap/2e403aa8-056e-4a05-954e-854c565ff908How often this domain was scanned/api/v1/domain/stats/vpnaegis.site Scan history for this domain/api/v1/domain/history/vpnaegis.site?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 21 HTTP transactions. The main domain is vpnaegis.site and was registered 4 days ago.

Submitted URL: http://vpnaegis.site/

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Four-day-old 'AEGIS VPN' collects phone numbers and card details through a live 'administrator' gate, with a Telegram bot token wired into the page to relay what it captures. Primary domain already flagged as fakeapp. Do not enter data.

Risk Factors (5)

Telegram bot token embedded in inline script — collected data can be forwarded straight to the operator's chat

Card number / expiry / CVC inputs present alongside a phone-number login on a 4-day-old domain

Real-time 'administrator Q&A' gate before login completes — characteristic of a live-run fraud flow, not an automated service

Domain registered 4 days ago, unranked in Cisco Umbrella, single-source 'fakeapp' (malware) report on the primary domain

No corporate identity, legal terms or named payment provider anywhere on the page despite soliciting card data

Domain age information unavailable

Details

Page Title

AEGIS VPN — Премиум защита

Scan Type

public

Favicon Hash

MMH3: -387710338

MD5: 2f744eb134fa4f9a5904ee4bbdab8350

Domain Name Analysis

You're looking at domain 'vpnaegis.site' on the .site top-level domain without a subdomain. The second-level label 'vpnaegis' is 8 characters long with three vowels and 5 consonants. It segments into two words: vpn, aegis. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.51s

Total Load Time

590 KB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru

Text Length:1,174 chars

Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain90% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

90%

technology software

87%

documentation technical

77%

phishing scam

74%

government public service

73%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	193.233.75.208	Frankfurt am Main, Hesse, Germany	AS209207Digital Hosting Provider LLC
7	142.250.154.95Google · CDN	United States	AS15169Google LLC
7	142.251.127.94Google · CDN	United States	AS15169Google LLC
21	3	-	-