Security Scan: Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5de2e242-7d5b-42ef-86b0-fcbd2ff274d2 Domain and IP registration (RDAP)/api/v1/rdap/5de2e242-7d5b-42ef-86b0-fcbd2ff274d2How often this domain was scanned/api/v1/domain/stats/114611461146.tppacks.com Scan history for this domain/api/v1/domain/history/114611461146.tppacks.com?limit=15

This website contacted 5 IPs in 2 countries across 3 domains to perform 5 HTTP transactions. The main domain is tppacks.com and was registered 1 month ago.

Submitted URL: https://114611461146.tppacks.com/zzr/1146pung1146/YW5kcmVhcy5wZWRlcnNlbkBwdW5nLnNl

Effective URL:

https://mail3s-zimbra-auth-login.frailsoft.com/zim/web-mail/#andreas.p...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed pung.se credential-phishing kit: base64 victim-email token in URL plus a fake Zimbra webmail login that exfiltrates email/password to an unrelated cross-origin host.

Risk Factors (5)

Password + email login form on a domain impersonating pung.se webmail

Base64-encoded victim email token in URL (phishing kit victim tracking)

Cross-origin credential form submission to an unrelated domain

Deceptive subdomain naming ('mail3s-zimbra-auth-login') mimicking a mail service

Untrusted, unranked hosting domain with no relationship to the impersonated brand

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

You're looking at domain '114611461146.tppacks.com' on the commercial generic top-level domain (.com) with subdomain '114611461146'. The second-level label 'tppacks' is 7 characters long with 1 vowel and six consonants. Breaking it apart gives two words: tp, packs. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.84s

Total Load Time

184 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:97 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism60% confidence

Type: webapp

Method: ml+structural

All Detected Categories

news media journalism

60%

government public service

55%

cryptocurrency blockchain

47%

healthcare medical

44%

adult content

41%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	188.114.97.9	United States	AS24940Hetzner Online GmbH
1	104.21.94.178Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	178.63.16.224	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
1	172.67.139.20Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	5	-	-