Security Scan Report: cloud-beds.group

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 4 domains to perform 7 HTTP transactions. The main domain is cloud-beds.group and was registered 8 months ago.

Submitted URL: https://cloud-beds.group/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Lookalike of Cloudbeds hosted on cloud-beds.group, running an email-harvesting sign-in page with a Telegram bot-token exfiltration script and a Safe Browsing social-engineering flag. Do not enter credentials.

Risk Factors (5)
Safe Browsing social-engineering / phishing classification
Impersonation of the Cloudbeds brand on a lookalike domain (cloud-beds.group vs. cloudbeds.com)
Telegram bot token embedded in page script provides an off-site exfiltration channel for submitted data
Fake account sign-in form harvesting email addresses
Domain unranked with negligible legitimacy signals
Domain age information unavailable

Details

Page Title

Cloudbeds Hotel Signin

Scan Type

public

Domain Name Analysis

You're looking at domain 'cloud-beds.group' on the .group top-level domain. The registrable portion 'cloud-beds' spans 10 characters holding 3 vowels versus 6 consonants, notching 1 hyphen. Segmentation suggests two words: cloud, beds. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Welcome Back Sign in to access your account Email Address . you@example.com OR CONTINUE WITH G Google © Apple Need help signing in?

Page Load Overview

1.74s
Total Load Time
135 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:140 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software58% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
58%
documentation technical
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
735.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0172.67.73.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
032.188.231.162Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
03.174.46.29Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
063.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0104.26.7.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
034.212.152.241Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
03.174.46.27Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
78--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T180038EBA20034967B10F9AF8B197DB1D489D4693EBDB1C1E153F68B227C1CF2D62B420

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:8LqicKETehjUuII3uiFiayfabi/QYNbKlwMz2yPRKXz4Z5dMX:picKETCj0I3uupyybi5oNSPUI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41360:geiAFdJBYBGE1CFQTkLFbIE4HB44kFxAQDIRmiCSGSqMBYKpycIAIAiOeCKIjCOGSMyESTDAcAIQASFggYCgCIhaoIQSgNIQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181c7cfefeff
Perceptual Hash:d90e62e322d98e5e
Difference Hash:efeab2f0e0f0b001
Wavelet Hash:000018187efefeff
Color Hash:N/A

Other Hashes

Crop Resistant:efeab2f0e0f0b001

Scan History

Scan history not available

Unable to load historical scan data