Security Scan: Roundcube Webmail __ Welcome to Roundcube Web

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8903f312-f954-4b88-bb8d-c56114b1de22 Domain and IP registration (RDAP)/api/v1/rdap/8903f312-f954-4b88-bb8d-c56114b1de22 Certificate Transparency/api/v1/ct/universalmobility.pro How often this domain was scanned/api/v1/domain/stats/universalmobility.pro Scan history for this domain/api/v1/domain/history/universalmobility.pro?limit=15

This website contacted 4 IPs in 2 countries across 3 domains to perform 3 HTTP transactions. The main domain is universalmobility.pro and was registered 19 years ago.

Submitted URL: https://universalmobility.pro/[email protected]

AI Security Verdict

Low Risk

Confidence: 95%

Risk Score

Fake Roundcube Webmail login on unrelated domain, harvesting credentials and posting externally to rocx.web.id.

Risk Factors

Brand impersonation of Roundcube Webmail on a non-official domain

Credential login form on a domain unrelated to the impersonated service

External POST network target suitable for credential exfiltration

Right-click blocking used as anti-analysis

Targeted email address embedded in the URL

Safety Factors

Domain is 2911 days old and has an established registration history

No payment fields detected

No JavaScript YARA malware patterns detected

No network IDS alerts detected

Single-source IP threat-intel match is generic abuse-reputation on shared hosting, not content evidence

The site's own login form (credentials submit to its own domain; 2911 days old) with no strong malicious indicators — a first-party sign-in is normal; risk clamped from 10 to 3

Domain age information unavailable

Details

Page Title

Roundcube Webmail __ Welcome to Roundcube Webmail

Scan Type

public

Favicon Hash

MMH3: -1754690812

MD5: 924a68d347c80d0e502157e83812bb23

Domain Name Analysis

Within the .pro top-level domain, 'universalmobility.pro' is registered and has no subdomain. Its registrable label 'universalmobility' stretches across 17 characters split between seven vowels and 10 consonants. Tokenizing the label suggests two words: universal, mobility. Expect 8.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.60s

Total Load Time

206 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:115 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain49% confidence

Type: static

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

49%

news media journalism

41%

technology software

37%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	184.168.30.79	United States	AS398101GoDaddy.com, LLC
0	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	94.136.171.57	United Kingdom	AS42831UK Dedicated Servers Limited
3	4	-	-