Security Scan Report: jpposst.myship-711-com-tw-tty.shop

Redirected to:
https://direct.jp-bank.japanpost.jp/tp1web/U010101WAK.do?link_id=ycDct...
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 3 countries across 8 domains to perform 35 HTTP transactions. The main domain is myship-711-com-tw-tty.shop and was registered 7 months ago.

Submitted URL: https://jpposst.myship-711-com-tw-tty.shop/OYmAvdRJ

Effective URL:
https://direct.jp-bank.japanpost.jp/tp1web/U010101WAK.do?link_id=ycDct...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

The captured page itself is the genuine Japan Post Bank login, but it was reached from a .shop host spoofing Japan Post/7-Eleven branding via a redirect — treat the link as a phishing lure and do not use it.

Risk Factors (3)
Deceptive entry hostname combining Japan Post Bank and 7-Eleven branding on an unrelated .shop registrable domain
Cross-domain redirect from a brand-squatting domain to a bank login page, opaque to the scanner (possible cloaking/targeted delivery)
Domain age/ranking in the feed belong to the entry .shop domain, not to the served japanpost.jp page, so they provide no assurance about what real visitors receive
Safety Factors (6)
The page actually captured is served from direct.jp-bank.japanpost.jp, the bank's own official domain, with real support number 0120-992-504 and genuine anti-fraud advisories
No credential (password) or payment fields in the captured DOM; no cross-origin form submission; no JS credential exfiltration
No JavaScript malware patterns, no high-precision YARA hits, no known malicious kit in roster
Third-party scripts limited to the bank's own subdomains plus a ranked userlocal.jp chat widget
Established domain (8551 days old) with no strong malicious indicators — risk clamped from 7 to 5
Rich gambling-platform content with same-origin account forms — this is an (illegal) gambling site's own front-end, not credential phishing of a third party; scam_type corrected from 'Brand Impersonation' to 'Illegal Gambling'
Domain age information unavailable

Details

Page Title

ゆうちょダイレクト | ログイン

Scan Type

public

Domain Name Analysis

The domain name 'jpposst.myship-711-com-tw-tty.shop' uses the commerce-oriented generic top-level domain (.shop), featuring subdomain 'jpposst'. The core label 'myship-711-com-tw-tty' covers 21 characters holding two vowels versus twelve consonants, plus three digits and 4 hyphens. Segmentation suggests six words: my, ship, 711, com, tw, tty. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://jpposst.myship-711-com-tw-tty.shop/OYmAvdRJ

Page Load Overview

7.03s
Total Load Time
612 KB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:80%
Script:Mixed
Direction:ltr

Detection Details

HTML Lang Attribute:ja
Text Length:2,178 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting97% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

gambling betting
97%
adult content
94%
social media network
92%
finance banking
88%
phishing scam
72%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5195.86.16.208Hong Kong, Hong Kong
AS984OCTOPUS WEB SOLUTION INC
323.50.131.133Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
33.115.94.131Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
354.64.7.4Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
352.199.213.118Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
3203.114.55.135Tokyo, Tokyo, Japan
AS2519ARTERIA Networks Corporation
3124.33.183.201Tokyo, Tokyo, Japan
AS17506ARTERIA Networks Corporation
323.50.131.150Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
318.176.39.41Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
316.76.74.239Aws · CLOUDTokyo, Tokyo, Japan
AS16509Amazon.com, Inc.
3511--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T177B28529D592A437815210E2BFA7BF6C5802AE1FDB068914B0BCA4173F81FDEED1257C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:NeT5XRuSCA77b7NK9T2QomsbRcbkia7aSayVr+:NeT5hBCAXb09CjAk7VK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24198:MyAExwB6KgyJCUATeAENgD5BrVYAAwAIAQB2B1jwGhNQVAsbQkPogQoAQl2kCKJwAIkEqB4IAG9ACI4B1FRYEhuAL7BCPjBd

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dbc3c3c3ffdfdfff
Perceptual Hash:b87c999b9a3c3c30
Difference Hash:3296960618321a18
Wavelet Hash:83c2c2c3c3c3c7cf
Color Hash:#40acbf

Scan History

Scan history not available

Unable to load historical scan data