Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5633f995-cbd6-4cc4-9f12-7c1ea856600a Domain and IP registration (RDAP)/api/v1/rdap/5633f995-cbd6-4cc4-9f12-7c1ea856600aHow often this domain was scanned/api/v1/domain/stats/hostinger-mail-ewgjnwrkgnkrw-zfxblcwflkloeucjbmjnbobs.pages.dev Scan history for this domain/api/v1/domain/history/hostinger-mail-ewgjnwrkgnkrw-zfxblcwflkloeucjbmjnbobs.pages.dev?limit=15

This website contacted 15 IPs in 1 country across 8 domains to perform 66 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: http://hostinger-mail-ewgjnwrkgnkrw-zfxblcwflkloeucjbmjnbobs.pages.dev/

Effective URL:

https://mail.hostinger.com/auth/login

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Free pages.dev host impersonating Hostinger webmail; scanner traffic matches the analyst-vetted multi-brand pages.dev phish kit (jg.js/js1.js, hostinger-mail cohort) with critical IDS obfuscation alerts. Do not enter credentials.

Risk Factors (5)

Known malicious phishing kit (multibrand-pagesdev-phish) identified by two independent critical kit-roster fingerprints

Brand impersonation of Hostinger webmail on an unrelated free pages.dev subdomain

Obfuscated/encoded script payloads with CRITICAL heap-spray IDS alert

Bot-protection challenge used to hide the real page from scanners (cloaking)

Cross-domain redirect from a look-alike pages.dev host toward the impersonated brand's real login path

Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Favicon Hash

MMH3: -1563827632

MD5: f33eca47dcd361e978830ce9c27c3611

Domain Name Analysis

The domain name 'hostinger-mail-ewgjnwrkgnkrw-zfxblcwflkloeucjbmjnbobs.pages.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'hostinger-mail-ewgjnwrkgnkrw-zfxblcwflkloeucjbmjnbobs'. Count 5 characters in 'pages' holding two vowels versus 3 consonants. Word splitting yields 1 word: pages. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.26s

Total Load Time

3.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-us

Text Length:390 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software78% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

78%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.250.154.95Google · CDN	United States	AS15169Google LLC
4	104.16.56.10Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.16.57.10Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
4	13.32.121.2Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
4	142.251.20.97Google · CDN	United States	AS15169Google LLC
4	34.160.81.0Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	52.222.236.94Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
66	15	-	-