Security Scan: https://limited-accountservice-paypal.vg

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/486731eb-ddcd-4407-b898-a545888656ba Domain and IP registration (RDAP)/api/v1/rdap/486731eb-ddcd-4407-b898-a545888656baHow often this domain was scanned/api/v1/domain/stats/limited-accountservice-paypal.vg Scan history for this domain/api/v1/domain/history/limited-accountservice-paypal.vg?limit=15

This website contacted 3 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is limited-accountservice-paypal.vg.

Submitted URL: https://limited-accountservice-paypal.vg

Effective URL:

https://startpage.vg/?var2=limited-accountservice-paypal.vg

Redirected

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

PayPal-impersonating .vg hostname redirecting to unrelated unranked startpage.vg, with a multi-source 'lumma stealer' malware indicator on the site's own IP:443 — treat as malicious.

Risk Factors (4)

Deceptive hostname impersonating PayPal ('limited-accountservice-paypal')

Multi-source 'lumma stealer' malware indicator on the site's own IP:443 (2 feeds)

Cross-domain redirect ending on unrelated, unranked startpage.vg

Unranked domain with no reputation and near-zero legitimacy signals (30/100)

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Favicon Hash

MMH3: 1064516042

MD5: cc293971feb692e18edd790fcd6ff10e

Domain Name Analysis

Within the .vg country-code top-level domain, 'limited-accountservice-paypal.vg' is registered and has no subdomain. Count 29 characters in 'limited-accountservice-paypal' with 11 vowels and 16 consonants; it also includes 2 hyphens. It segments into four words: limited, account, service, paypal. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.07s

Total Load Time

2 KB

Total Size

Language Analysis

Primary Language

🏳️UNKNOWN

Code: unknown

Confidence:0%

Detection Details

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	88.198.29.97	Nuremberg, Bavaria, Germany	AS24940Hetzner Online GmbH
1	159.69.42.212	Nuremberg, Bavaria, Germany	AS24940Hetzner Online GmbH
1	159.69.186.9	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
4	3	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195F0D3FC14E1882C52E2724A7D3D26417850F2432405D40AF94CEA305F74A8BCD7A2FE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kx/Xf0pwTJeandBANTl5MU455RiEVOayNzpIVWBB/rBpGKxH6P5:k7YadBq4nQEVOakSVWr/r2LR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:628:AAAAAEAAAAAABAAAgBQAAAAAAAAgAAAIAAAAAAABBAAAIAAAAAAAAUAAAIAAAAAEAAAgAAAAAAAAAAAAAAAAAAAAAAApAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff

Perceptual Hash:870f0f0f0f0f0f0f

Difference Hash:8000000000000000

Wavelet Hash:70f0f0f0f0f0f0f0

Color Hash:#783a55

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: limited-accountservice-paypal.vg