Security Scan Report: demowork.shop

Redirected to: https://demowork.shop/login.php

Submitted: Feb 5, 2026, 1:25:29 AMCompleted: Feb 5, 2026, 1:27:52 AMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 3 countries across 14 domains to perform 72 HTTP transactions. The main domain is demowork.shop and was registered NaN years ago.

Submitted URL: https://demowork.shop/index.html

Effective URL: https://demowork.shop/login.phpRedirected

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Confirmed phishing scam; do not provide credentials.

Risk Factors
Newly registered domain (<7 days) with credential collection form
Hidden password field indicating possible credential harvesting
Login form on an untrusted, brand‑new domain
Domain age information unavailable

Details

Page Title

Login Basic - Pages | Sneat - Bootstrap 5 HTML Admin Template - Pro

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(61%)

Domain Information

You're looking at domain 'demowork.shop' on the commerce-oriented generic top-level domain (.shop) without a subdomain. The core label 'demowork' covers 8 characters with 3 vowels and five consonants. Segmentation suggests 2 words: demo, work. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://demowork.shop/index.html

Page Load Overview

48.34s
Total Load Time
131
HTTP Requests
14
Domains
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:95 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software61% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
61%
news media journalism
32%
government public service
30%
documentation technical
28%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14142.251.141.67India
9195.177.94.253United States
9142.250.201.74Finland
918.66.102.106Unknown
9142.250.187.232Unknown
9104.17.25.14United States
AS13335Cloudflare, Inc.
9104.26.3.193UnknownUnknown
986.38.243.190Mumbai, Maharashtra, India
AS47583Hostinger International Limited
9151.101.2.137UnknownUnknown
9185.111.111.157UnknownUnknown
13114--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16233F8934981104BF2278F6566D4FA0C65E49607FD720D9EB1BCE018CF83F9E15BA39A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:AcUvdNU/RP/0415fw+pJw/dDPDXe9GBqpDxDyAZxrh4z:sdNUZJw+pGa9GUhxDh14z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:50529:ECgFeBCRkzTCIBxwJOEiARlQBw4MNolABWBRDSAaULAcIgiRgRkEwAIwEkBECKGQwpoUGgUAooBQAuwwYizpDGE6wEiwRQIy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffe7e7ffe7
Perceptual Hash:b3cccc338ccc3366
Difference Hash:000032324c4c3008
Wavelet Hash:0f0f1b1b07070f0f
Color Hash:#1f9321

Other Hashes

Crop Resistant:000032324c4c3008

Scan History

Scan history not available

Unable to load historical scan data