ScanMalware.com

Security Scan Report: joelosteen12645-creator.github.io

Site favicon
Submitted: Nov 4, 2025, 1:13:22 AMCompleted: Nov 4, 2025, 1:14:04 AMpubliccompleted
Loading additional data...

Summary

This website contacted 22 IPs in 4 countries across 8 domains to perform 28 HTTP transactions. The main domain is joelosteen12645-creator.github.io.

Submitted URL: https://joelosteen12645-creator.github.io/ok/#%5Bemail%C2%A0protected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Phishing page impersonating IONOS login; high risk to users

Risk Factors
Phishing login form collecting credentials
Brand impersonation of IONOS on an untrusted domain
Google Safe Browsing social engineering detection
New/unranked domain lacking reputation
Absence of noindex tags despite credential collection
Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Language

🇺🇸

English

(50% confidence)

Category

technology software

(47%)

Domain Information

The domain 'joelosteen12645-creator.github.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and includes subdomain 'joelosteen12645-creator'. The core label 'github' covers 6 characters containing two vowels alongside 4 consonants. It segments into 3 words: g, it, hub. Average segment length settles at 2 characters. 'g' is most common in English usage. Usage also turns up in Chinese (Pinyin) and Chinese (Zhuyin) contexts.

Screenshot

Security scan screenshot of https://joelosteen12645-creator.github.io/ok/#%5Bemail%C2%A0protected

Page Load Overview

23.80s
Total Load Time
28
HTTP Requests
8
Domains
2.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:50%
Script Type:Latin
Text Length:639 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software47% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
47%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
734.117.59.81Kansas City, Missouri, United States
AS396982GOOGLE-CLOUD-PLATFORM
1217.160.86.41Germany
AS8560IONOS SE
1104.18.54.45United States
AS13335CLOUDFLARENET
1149.154.167.220London, England, United Kingdom
AS62041Telegram Messenger Inc
1213.165.66.58Germany
AS8560IONOS SE
1104.18.50.34United States
AS13335CLOUDFLARENET
1185.199.111.153United States
AS54113FASTLY
1217.160.86.136Germany
AS8560IONOS SE
1217.160.86.24Germany
AS8560IONOS SE
12606:4700:3113::6812:362dUnited States
AS13335CLOUDFLARENET
2822--

Detected Technologies4

PasswordField
100%
HSTS
40%
GitHub Pages
40%
Fastly
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1846461C177C1BC8112875B76732BB2E6F43A4DE97488488AF108BC94F6BD911FAE4971

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:K5YjRa4XCi9a2tsoJIVv2P95iIXLaRxXjwsd72zeNguuSo6CPsTeqa5qKk1MMckc:gsR9Si9a2tsouVeP957X4litvN6CwJSr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:333957:bRLEECAKFEYYSIZYgDiiAtFoBAGEoTAKURJZgSACBQkkBZmgUZLiYhogZskKAmCSI+CnhAIZStIsiCFAHCiksBAM0wBxAIUy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data