Security Scan Report: switch-mas1-btwebmail.pages.dev

Redirected to:
https://asx-indexbt-switch1.vercel.app/?./index-rui.jsp?v=2.32.0#app/m...
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://switch-mas1-btwebmail.pages.dev/?.https://dry-meadow-7114.fly.dev/

Effective URL:
https://asx-indexbt-switch1.vercel.app/?./index-rui.jsp?v=2.32.0#app/m...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Nothing malicious is served: the destination is a generic vercel.app 404 with no forms or brand UI. The phishing-style hostname and embedded third-party URL warrant caution, but evidence for a scam verdict is absent.

Risk Factors (4)
Deceptive-looking hostname that imitates a Webmail login endpoint ('btwebmail') on a free hosting subdomain
URL query embeds an unrelated third-party host (dry-meadow-7114.fly.dev) with a mail-app fragment path
Subdomain on a shared hosting platform (.pages.dev) with unknown actual creation date
MEDIUM network IDS observations of actor-abused cloud hosting services
Safety Factors (6)
Verified form facts: 0 forms, 0 password fields, 0 payment fields — no credential or payment capture
No Indicators of Compromise matches against the page or its resources
No JavaScript malware patterns and no obfuscated/credential-exfiltrating scripts
No brand impersonation content — the served page is a generic 404 with no login or brand UI
No phishing or malware IDS/Safe Browsing/YARA alert
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 4
Domain age information unavailable

Details

Page Title

404: NOT_FOUND

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'switch-mas1-btwebmail.pages.dev' is registered; it also runs on subdomain 'switch-mas1-btwebmail'. The registrable portion 'pages' spans 5 characters holding 2 vowels versus 3 consonants. It segments into 1 word: pages. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://switch-mas1-btwebmail.pages.dev/?.https://dry-meadow-7114.fly.dev/

Page Load Overview

1.14s
Total Load Time
4 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:198 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical58% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
58%
news media journalism
34%
healthcare medical
32%
government public service
31%
technology software
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.66.45.12Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
064.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0172.66.46.244Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
34--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CBC02BFB5040D322FD1A38895CC67E08052701FD2C4D476850A7505CE2B8666A61D048

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6z9KEIdKjOwi2RMcTyXJL8gSEMLPpTvVTVLVacz:qzxO96zoUFRMcWXJVKpVTVLVXz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:f03f2bf2ce5f93a709f656056c0e3800

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffe7
Perceptual Hash:b389cccc3333cccc
Difference Hash:0000000c0c00000c
Wavelet Hash:fcfcfce4041c3c24
Color Hash:#d2a679

Other Hashes

Crop Resistant:0000000c0c00000c

Scan History

Scan history not available

Unable to load historical scan data