ScanMalware.com

Security Scan Report: fleetfarm.fexa.io

Redirected to:
https://fleetfarm.fexa.io/main/index#login
Site favicon
Submitted: Jul 4, 2026, 6:13:22 PMCompleted: Jul 4, 2026, 6:14:52 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 2 HTTP transactions. The main domain is fleetfarm.fexa.io and was registered NaN years ago.

Submitted URL: https://fleetfarm.fexa.io

Effective URL: https://fleetfarm.fexa.io/main/index#loginRedirected

The Cisco Umbrella rank of the primary domain is #198,708 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 86%

3
Risk Score

The site impersonates the Fleet Farm brand, hosts a credential login form, and triggers a high‑severity IDS malware alert, indicating a credential phishing operation.

Risk Factors
Brand impersonation on unrelated domain
Credential collection form
High‑severity IDS malware alert
Low domain ranking for claimed brand
Rapid redirect behavior
Safety Factors
Domain age 3096 days (well‑established)
No IoC matches
No JavaScript malware YARA detections
No credential exfiltration observed
No cross‑origin form submissions
Top-ranked domain (Cisco Umbrella #198,708, 3096 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Fexa

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

technology software

(31%)

Domain Information

The domain 'fleetfarm.fexa.io' uses the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'fleetfarm'. The second-level label 'fexa' is 4 characters long with two vowels and 2 consonants. Splitting it apart reveals 3 words: f, ex, a. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fleetfarm.fexa.io

Page Load Overview

8.10s
Total Load Time
63
HTTP Requests
12
Domains
15.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
Text Length:91 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software31% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
31%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2152.54.197.21Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
2113.35.58.85Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
21216.198.53.3United States
AS209242Cloudflare London, LLC
633--

Detected Technologies4

X-UA-Compatible
100%
PasswordField
100%
Zendesk
20%
Google Maps
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13F734CA67504D02192479B9D742E7F0D342BA752CC06D63DB2BCB0D86BDAFA8543B938

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:skTXGWLYWbG6v6xRfgJSDsybFvgX8QPMarQQZ2/BjZJHA:B2WcW36xRfgBy5vgX8QPMarQQZ2/B1Jg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:77194:ADBR2UICASNgWEREGMThiSlIUKWkABBkGABwBCwzAmCDgktYEUGCEofYSPAhhIIDAIC2o2G1UABoolKIAQFGALjQEjCZwxHT

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff3e08181800ffff
Perceptual Hash:d915a7e29ce9681c
Difference Hash:0c7c303232130760
Wavelet Hash:ff1e00181800ffff
Color Hash:#643a78

Other Hashes

Crop Resistant:0814080dcd607038,a2b0b2b8b2828c8a,118b072009000000,783232323232330f

Scan History

Scan history not available

Unable to load historical scan data