Security Scan Report: zu7013.craftum.io

Site favicon
Submitted: Sep 27, 2026, 10:50:07 AMCompleted: Sep 27, 2026, 10:50:45 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed SharePoint credential-phishing page on a free craftum.io subdomain: fake 'verify your password' login posts credentials to an unrelated external host, matching a HIGH IDS phishing signature.

Risk Factors (5)
Credential harvesting form (email + password) on a free website-builder subdomain
Impersonation of Microsoft SharePoint sign-in styling
Suricata HIGH phishing alert for Ajax XHR credential-post landing
Cross-origin form/credential POST to an unrelated external domain (onamaeweb.jp)
Urgency/deception lure impersonating a file-sharing/verification flow
Domain age information unavailable

Details

Page Title

Four(4) Pending File

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'zu7013.craftum.io' is registered with subdomain 'zu7013'. Its registrable label 'craftum' stretches across 7 characters containing two vowels alongside 5 consonants. Segmentation suggests two words: craft, um. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zu7013.craftum.io/

Page Load Overview

4.73s
Total Load Time
342 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:130 chars
Detector Agreement:50%

Website Classification

Primary Category

adult content54% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
54%
healthcare medical
54%
technology software
51%
phishing scam
49%
finance banking
42%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
292.255.111.71St Petersburg, St.-Petersburg, Russia
AS9123Jsc timeweb
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1104.17.124.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
192.53.68.16St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
1104.17.123.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
76--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F7721A00E9E365D61133C1B52FBFB9143E99840B8908CE447A9C6B9C5F9CF55ACA37CA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Cq+UQgNZT2lHpGUaUFyZPkdnLM5s4E+uz4UR5d/mW9KAXjs2pxb1CtoGDH7pGDHm:CqzQmybpbnydEl4UtCTsToJRbfz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17331:iJCFawGRNeWZUGwCbEQRQI4ARUREGAWKBnESVAACEggTICKStWRkBATDpwReVMSPC0QQKn9QuBEQCUAIAunKEKUYIJwYIoAY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f08df6767f9391f
Perceptual Hash:a0f01debb6c0dcb4
Difference Hash:b339bccc8cb3eb76
Wavelet Hash:7f00c72767f11117
Color Hash:#783f3a

Other Hashes

Crop Resistant:b339bccc8cb3eb76

Scan History

Scan history not available

Unable to load historical scan data