Security Scan Report: www.wampay.app

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 8 HTTP transactions. The main domain is wampay.app and was registered 2 days ago.

Submitted URL: https://www.wampay.app

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

One-day-old self-branded Persian loan-portal login page; no impersonation, exfiltration, malware or Indicators of Compromise, but a password form on an unvetted new domain with a Spamhaus-listed host warrants caution.

Risk Factors (3)
Brand-new domain (1 day old) hosting a password-collecting login form
HIGH network IDS alert for Spamhaus DROP-listed inbound traffic associated with the host
No established reputation for a site presenting itself as a financial/loan services platform
Safety Factors (4)
Self-branding: page name matches its own domain, no evidence of impersonating a different organisation
Form posts same-origin; no cross-origin credential submission and no credential exfiltration in JavaScript
No Indicators of Compromise, no hunting rule malware patterns, no vetted-kit match, no disguised password fields
Site has a coherent structure (role selection for applicant/broker/admin) typical of a newly launched platform
Domain age information unavailable

Details

Page Title

ورود | وام پی

Scan Type

public

Domain Name Analysis

The domain name 'www.wampay.app' uses the application-focused generic top-level domain (.app) with subdomain 'www'. The core label 'wampay' covers 6 characters with two vowels and four consonants. It segments into two words: wampa, y. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

ورود به وام بى نقش خود را انتخاب كنيد ‎line‏ كاركزار ادمين ‏شماره موبايل * ‎09123456789 ‏299 9 ثبتنام ‏حساب كاركزارى نداريد؟ ثبتنام كاركزار ‎IFea ©‏ - سامائدى هوشمند تسهيلات وام ‎or‏

Page Load Overview

1.80s
Total Load Time
264 KB
Total Size

Language Analysis

Primary Language

🇮🇷Persian
Code: fa
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:fa
Text Length:375 chars
Detector Agreement:50%

Website Classification

Primary Category

finance banking55% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
55%
government public service
39%
adult content
34%
healthcare medical
34%
technology software
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
262.60.191.177Iran
AS213852Tose'e Shabakeh Azad Ltd
2104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
83--

Detected Technologies3

Nginxv1.24.0
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13F53C5842DF715354523E07A63DFA124F23598076408EA65B9AC03086FCAB29D7BF7ED

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:nEFJWgnrpFYa5rY79Fuh15AQzZdH+fYRX9eyWsGPTo6YSky+W:kBYugFuhdXPEUi+W

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:64520:1QZQWAyAkWQIKVkrBJXgBhQI2JsAMgIo0FsZKqYhChBMtQIFqCYDCAYA6CCSAXQJQiiSSsFFgKoNoLCWACOIAIooUgig0QcI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fffff7e7e7ffff
Perceptual Hash:e61d1933664c3733
Difference Hash:d460aca54d4d3008
Wavelet Hash:00fffff0e0e0e0e0
Color Hash:07000000e00

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data