Security Scan Report: arnmanpharrna.com

Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 8 domains to perform 15 HTTP transactions. The main domain is arnmanpharrna.com and was registered 7 months ago.

Submitted URL: https://arnmanpharrna.com/Alldomain/fitsaldomain.html?eta=a.b@c

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Phishing page posing as a webmail sign-in behind a fake 'verify you are human' gate; the email/password form is wired to a Telegram bot for exfiltration. Never enter credentials.

Risk Factors (6)
Fake browser-verification / CAPTCHA gate hiding a credential form
Email + password harvesting form on a domain unrelated to any webmail provider
Telegram bot API used to exfiltrate collected data
External IP geolocation lookup (ipify.org) used for visitor fingerprinting
Domain unranked in Cisco Umbrella with a low legitimacy score (10/100)
Redirect chain (2 hops) into a deep path with a templated filename and query parameter
Domain age information unavailable

Details

Page Title

Webmail Sign-in

Scan Type

public

Domain Name Analysis

Domain 'arnmanpharrna.com' uses the commercial generic top-level domain (.com). The core label 'arnmanpharrna' covers 13 characters with four vowels and 9 consonants. Breaking it apart gives four words: arn, man, pha, rrna. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://arnmanpharrna.com/Alldomain/fitsaldomain.html?eta=a.b@c

Page Load Overview

0.49s
Total Load Time
117 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:245 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical59% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
59%
technology software
55%
news media journalism
43%
healthcare medical
40%
adult content
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
481.19.141.146Frankfurt am Main, Hesse, Germany
AS215540Global Connectivity Solutions Llp
1104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1142.251.152.119Google · CDNUnited States
AS15169Google LLC
1142.251.110.104Google · CDNUnited States
AS15169Google LLC
1142.251.127.94Google · CDNUnited States
AS15169Google LLC
1172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.103Google · CDNUnited States
AS15169Google LLC
1104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.155.119Google · CDNUnited States
AS15169Google LLC
1512--

Detected Technologies3

Bootstrapv5.3.0
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C6320862ABF9043D32A3D0A935B5A7887E31C10BDE41455A387D2A954FCEE8688777C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:U7Uq6jfD9jTZLox1JJy4Sf+KJAM7R0eyiYtmfe0risLiZi4jb2UO4UWOA+:UAbX0eyijG0riyiZi4jDUW8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11909:oCSHyFyCBEI65AIAIVhEoki38EAGgJQiGIxfE4BHjAIRA+AAY4FBDoqFmhHJRmEr1kA0hCGAkkAJTJWZAAkEMGiFAAK+DESp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3c3ffffffffff
Perceptual Hash:b13164cece9b9931
Difference Hash:0016160000000000
Wavelet Hash:fcc0c0fcf0f0f0f0
Color Hash:#1f5793

Other Hashes

Crop Resistant:0016160000000000

Scan History

Scan history not available

Unable to load historical scan data