ScanMalware.com

Security Scan Report: pakko.netdev.secureconnect.vapor.my

Site favicon
Submitted: Jan 17, 2026, 4:12:53 AMCompleted: Jan 17, 2026, 4:14:37 AMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 2 countries across 7 domains to perform 1 HTTP transaction. The main domain is pakko.netdev.secureconnect.vapor.my and was registered NaN years ago.

Submitted URL: https://pakko.netdev.secureconnect.vapor.my/

AI Security Verdict

High Risk

Confidence: 88%

7
Risk Score

High‑risk phishing site impersonating Discord; do not provide any information.

Risk Factors
Brand impersonation / typosquatting (Discord branding on unrelated domain)
Unranked domain with low reputation
Recent domain age (<1 year) increasing suspicion
Domain age information unavailable

Details

Page Title

VAPOR v4

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

education learning

(98%)

Domain Information

Domain 'pakko.netdev.secureconnect.vapor.my' uses the Malaysian country-code top-level domain (.my) with subdomain 'pakko.netdev.secureconnect'. Its registrable label 'vapor' stretches across 5 characters containing 2 vowels alongside three consonants. Splitting it apart reveals 1 word: vapor. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pakko.netdev.secureconnect.vapor.my/

Page Load Overview

1.99s
Total Load Time
32
HTTP Requests
9
Domains
2.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:35,915 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning98% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

education learning
98%
adult content
62%
government public service
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8159.195.59.55Nuremberg, Bavaria, Germany
AS197540netcup GmbH
4172.240.108.84Germany
AS54113
4172.67.69.226United States
AS13335CLOUDFLARENET
4142.251.208.3Germany
AS7979
4104.16.174.226Germany
AS24940
4142.250.185.138Germany
AS13335
4216.58.206.72GermanyUnknown
327--

Detected Technologies4

Node.js
50%
HTTP/3
40%
Express
40%
Google Analytics
35%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19633216B79F12A660AD3205B21135684EFBA450FB2150C80FCFE86587F5285AD3E773B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:FWMW1W1W1W1W1W1W1W1W1W1W1W1W1W1W1W1W1W1W1W1WM:n

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:51623:EDGAAATAkCBAAFgCRIUR8AAACQAJAgRIkY0gUAUQQQDCFCkACGAGGgooEIGIgAiNAJBagUAJyKUgIAEJgElBEICwAIAKg9AC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181808000000
Perceptual Hash:8ccc6633db8c6e26
Difference Hash:3332b3b31b070737
Wavelet Hash:1f1f1f1f1f030383
Color Hash:#878cc5

Other Hashes

Crop Resistant:3332b3b31b070737

Scan History

Scan history not available

Unable to load historical scan data