Security Report: microfis-password-recovery.wasmer.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/87e37473-84b2-40b2-b6a4-91cf3aff1fa8 Domain and IP registration (RDAP)/api/v1/rdap/87e37473-84b2-40b2-b6a4-91cf3aff1fa8How often this domain was scanned/api/v1/domain/stats/microfis-password-recovery.wasmer.app Scan history for this domain/api/v1/domain/history/microfis-password-recovery.wasmer.app?limit=15

This website contacted 10 IPs in 3 countries across 6 domains to perform 11 HTTP transactions. The main domain is wasmer.app and was registered 8 years ago.

Submitted URL: https://microfis-password-recovery.wasmer.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake document-unlock login page on a free wasmer.app subdomain; it harvests email/password credentials and ships them to a Telegram bot, with DevTools/right-click blocking to hide it.

Risk Factors (5)

Credential-collection form (email + password) framed as required to unlock a PDF file

Telegram bot token embedded in inline JavaScript enabling exfiltration of captured credentials

DevTools and right-click blocking to hinder inspection

Instant-publish shared-hosting subdomain with no verifiable identity or legitimate business footprint (legitimacy score 10/100, unranked)

Domain age information unavailable

Details

Page Title

Email Portal Access | Secure Digital Platform

Scan Type

public

Domain Name Analysis

Domain 'microfis-password-recovery.wasmer.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'microfis-password-recovery'. The registrable portion 'wasmer' spans 6 characters with 2 vowels and four consonants. Tokenizing the label suggests 2 words: was, mer. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Document Encryption Sign in with your organization's email credentials to access PDF file. Email address Username Password Password O Remember me sa Gsute Log In to View File stems Incorporate...

Page Load Overview

3.91s

Total Load Time

486 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:318 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software60% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

60%

corporate business

57%

documentation technical

56%

government public service

40%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	51.178.223.162	France	AS16276OVH SAS
1	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	45.43.142.5	United Kingdom	AS16276OVH SAS
1	104.16.79.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	45.43.142.2	United Kingdom	AS16276OVH SAS
1	45.43.142.4	United Kingdom	AS16276OVH SAS
11	10	-	-