ScanMalware.com

Security Scan Report: retpam.top

Redirected to:
https://retpam.top/login.html
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8da74292-1f32-49f5-82d7-f187d0bf50baDomain and IP registration (RDAP)/api/v1/rdap/8da74292-1f32-49f5-82d7-f187d0bf50baHow often this domain was scanned/api/v1/domain/stats/retpam.topScan history for this domain/api/v1/domain/history/retpam.top?limit=15
This website contacted 1 IP in 1 country across 2 domains to perform 49 HTTP transactions. The main domain is retpam.top and was registered 6 days ago.

Submitted URL: https://retpam.top/

Effective URL:
https://retpam.top/login.html
Redirected

AI Security Verdict

High Risk

Confidence: 60%

7
Risk Score

Brand-new (1-day-old), unranked domain hosting a generic mobile-number/password login page with an unrelated title. No impersonation, exfiltration or malware found, but the identity and purpose of the operator are unverified — treat credentials with caution.

Risk Factors (3)
One-day-old domain hosting a credential-collection form for mobile number and password
Generic, unbranded 'multilingual authentication system' title with no stated operator identity or ownership information
No verifiable reputation or history for the domain
Domain age information unavailable

Details

Page Title

登入 | 多語言認證系統

Scan Type

public

Domain Name Analysis

The domain name 'retpam.top' uses the .top top-level domain while skipping any subdomain. The second-level label 'retpam' is 6 characters long holding two vowels versus four consonants. Segmentation suggests two words: ret, pam. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://retpam.top/

Page Load Overview

6.02s
Total Load Time
3.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:61%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-Hant
Text Length:176 chars
Detector Agreement:100%
Language mismatch: Declared as zh-Hant but detected as en

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4945.192.109.56Seychelles
AS401701cognetcloud INC
491--

Detected Technologies4

Nginx
40%
HTTP/3
40%
HSTS
40%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C881A390A4EC4A1D522289DCADA1AA023915F507C9CCB110BFBD0DFF6FCBD906C1B096

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Cro4y55VG1dP1g1ki3iN3rTnaIfqHPgipGGVsEQNl5zZ12aJdZmrT/S6ZFbrNmzC:CrolMdPMdmrzaFM4gr5FJdZmP6NqX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3990:ATUABAABGBQBC4AIGoBgKUAUgQgBFQABCAQDIBgAEAoAAEBC4QgAIBACAAAAQAGEEA6AoBAaCAJqCAAQADAoAhIAgBQAABLA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffff3ffe7e7fffe
Perceptual Hash:f688dd2373886666
Difference Hash:000425324d4c300a
Wavelet Hash:0c0c1018e7fff3f2
Color Hash:#d22d9b

Other Hashes

Crop Resistant:000425324d4c300a

Scan History

Scan history not available

Unable to load historical scan data