Security Scan Report: webmail3.armstrongmywire.com

Redirected to:
https://authorize.agoc.com/u/login/identifier?state=hKFo2SAzWGwzSzNLYi...
Submitted: May 10, 2026, 4:38:07 PMCompleted: May 10, 2026, 4:40:49 PMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 5 HTTP transactions. The main domain is authorize.agoc.com and was registered NaN years ago.

Submitted URL: https://webmail3.armstrongmywire.com

Effective URL: https://authorize.agoc.com/u/login/identifier?state=hKFo2SAzWGwzSzNLYi1veXZsdGtZSWJlUWVZaFk4NFNZNFAyWaFur3VuaXZlcnNhbC1sb2dpbqN0aWTZIHBkc1hsQ3B5VnU2UjB6TmthUG5odV8tX3AwOG9qci1lo2NpZNkga0JWQ1R4a3hHTzU2blh5NTJnV0NBZ2hzR1ZFRGtBcXARedirected

The Cisco Umbrella rank of the primary domain is #533,131 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 80%

5
Risk Score

The site pretends to be an official Armstrong login, uses a credential form on a low‑ranked, unrelated domain with multiple redirects, indicating a high‑risk brand impersonation phishing attempt.

Risk Factors
Brand impersonation with credential form
Low domain ranking for claimed brand
Multiple redirects and domain change
Credential collection on a non‑official domain
Safety Factors
Domain age >30 years (well‑established)
No Indicators of Compromise detected
No JavaScript malware YARA matches
No network IDS alerts
No evidence of credential exfiltration
Established domain (11141 days old) with no strong malicious indicators — risk clamped from 8 to 5
Domain age information unavailable

Details

Page Title

Log in

Scan Type

public

Language

🇺🇸

English

(58% confidence)

Category

finance banking

(36%)

Domain Information

The domain 'webmail3.armstrongmywire.com' uses the commercial generic top-level domain (.com), featuring subdomain 'webmail3'. The second-level label 'armstrongmywire' is 15 characters long split between 4 vowels and eleven consonants. Segmentation suggests three words: armstrong, my, wire. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://webmail3.armstrongmywire.com

Page Load Overview

90.12s
Total Load Time
11
HTTP Requests
5
Domains
7 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:58%
Script Type:Latin
Text Length:179 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking36% confidence
Type: webapp
Method: ml+structural

All Detected Categories

finance banking
36%
government public service
36%
news media journalism
35%
real estate property
34%
healthcare medical
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
318.64.195.35United States
AS16509Amazon.com, Inc.
2193.122.169.252Ashburn, Virginia, United States
AS31898Oracle Corporation
224.154.5.232Butler, Pennsylvania, United States
AS27364Armstrong
2172.64.144.74United States
AS13335Cloudflare, Inc.
2129.159.124.34Ashburn, Virginia, United States
AS31898Oracle Corporation
115--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EE231AC931E231731A6711B621DF614A7235A5438C0E9D00B9ADEAD46FBCF9A5F23E4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:pqJP2SFmz72vGCPUMo9oKKdfTb22rn39LqR1vXPn5Fhrl+QLLqu1vXPB1vYQk20u:dSg/2GMo9oKKt22xLCHhrTLpnYQk2Ma

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:49373:SAgggrZA8kQKoNHEgDicolIuNAAlCRqSCGmBcIIhwA4Ci6IBEKNNAkVAE4DRgAgaBiPoEMiiRIAQQIBpgSTIFECDEQIGeGSk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffe7e7ffff
Perceptual Hash:b3cccc3333cc3326
Difference Hash:00000c004d0c0008
Wavelet Hash:f0f0e0e0e4e4e4fc
Color Hash:#3a2d86

Other Hashes

Crop Resistant:00000c004d0c0008

Scan History

Scan history not available

Unable to load historical scan data