ScanMalware.com

Security Scan Report: wf5159.craftum.io

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/86f4260c-722d-44c0-9697-115cc72c45acDomain and IP registration (RDAP)/api/v1/rdap/86f4260c-722d-44c0-9697-115cc72c45acHow often this domain was scanned/api/v1/domain/stats/wf5159.craftum.ioScan history for this domain/api/v1/domain/history/wf5159.craftum.io?limit=15
This website contacted 2 IPs in 1 country across 3 domains to perform 13 HTTP transactions. The main domain is craftum.io and was registered 5 years ago.

Submitted URL: https://wf5159.craftum.io/

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Phishing login page impersonating UPC Mail/hispeed.ch on a Craftum subdomain, using a disguised password field and Unicode evasion to harvest email credentials.

Risk Factors (5)
Brand impersonation of UPC Mail / hispeed.ch on a non-official domain
Credential-harvesting login form with email and password fields
Disguised password field using type='text' with a password placeholder
Unicode evasion / mixed-script characters in form fields
Deceptive page title mimicking the official upcmail.hispeed.ch URL
Domain age information unavailable

Details

Page Title

https://upcmail.hispeed.ch/appsuite/

Scan Type

public

Domain Name Analysis

Domain 'wf5159.craftum.io' uses the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'wf5159'. Count 7 characters in 'craftum' holding two vowels versus five consonants. Tokenizing the label suggests two words: craft, um. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

we OPC Mail Bitte geben Sie lhre Mail Login-Daten ein E-Mail-Adresse Passwort Passwort vergessen? Angemeldet bleiben Craftum KoxctpykTop caliToe Craftum

Page Load Overview

2.14s
Total Load Time
259 KB
Total Size

Language Analysis

Primary Language

🇧🇬BG
Code: bg
Confidence:40%
Script:Unknown
Direction:ltr

Detection Details

Text Length:80 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software68% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
68%
documentation technical
56%
government public service
53%
healthcare medical
49%
cryptocurrency blockchain
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
792.255.111.71St Petersburg, St.-Petersburg, Russia
AS9123Jsc timeweb
692.53.68.16St Petersburg, St.-Petersburg, Russia
AS49505JSC Selectel
132--

Detected Technologies4

MetaGenerator
100%
Nginx
40%
Google PageSpeedv1.13.35.2-0
40%
Craftum
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FC227362B8B47455121B86FAB8A93D180057E327C8844CC8B23D4AF46FD4F756DC775E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:DrJUT8NZTE9wQs4oUIqTibYTfbYT9bYTTbYTYKbYTsbsbM/2K7:DrmTSP6PTibKfbK9bKTbK/bKsbf7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10755:w7CMIaICQCICEBHOhHIiKAiMIMOAFrg3HSBEKNAAQMAYKQdiCHgCM0OI0NgQRgUEBykB6MclhIZgGUHkBYBCQCMinAH4QlAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:18181800ffffffff
Perceptual Hash:db5b5b98b0243999
Difference Hash:f9e9e88eb3322a08
Wavelet Hash:1818180058dfffff
Color Hash:N/A

Other Hashes

Crop Resistant:f9e9e88eb3322a08,000830b232080000

Scan History

Scan history not available

Unable to load historical scan data