Security Scan Report: 148.72.244.125

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 10 HTTP transactions. The main domain is 148.72.244.125.

Submitted URL: https://148.72.244.125/yahoo/login.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake Yahoo sign-in page on a bare IP address with a password-and-email capture form, flagged by Google Safe Browsing for social engineering — a credential phishing site impersonating Yahoo.

Risk Factors (4)
Safe Browsing social-engineering verdict
Impersonation of Yahoo on a non-Yahoo host (raw IP address)
Credential-harvesting login form (password + email fields) on an unranked IP host
Pages claim 'Sign up' / 'Trouble signing in?' links to real Yahoo, while the actual submit posts locally — a classic credential-capture pattern
Domain age information unavailable

Details

Page Title

Yahoo - login

Scan Type

public

Domain Name Analysis

The domain '148.72.244.125' uses an unknown top-level domain without a subdomain. The core label '148.72.244.125' covers 14 characters split between 0 vowels and zero consonants, along with eleven digits. Splitting it apart reveals 4 words: 148, 72, 244, 125. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

YAHOO! Help Yahoo makes it easy to enjoy what matters most in your world. Best in class Yahoo Mail, breaking local, national and global news, finance, sports, music, movies and more. You get more...

Page Load Overview

1.74s
Total Load Time
133 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Text Length:4,653 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content53% confidence
Type: webapp
Method: ml+structural

All Detected Categories

adult content
53%
finance banking
46%
healthcare medical
43%
news media journalism
38%
gambling betting
37%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4148.72.244.125Singapore, Singapore
AS26496GoDaddy.com, LLC
387.248.119.252United Kingdom
AS203220Yahoo-UK Limited
387.248.119.251United Kingdom
AS203220Yahoo-UK Limited
103--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11FA3B7106ED05919B9DF86D030E12908107A730AE0568B7DFC9DAFF95BD18F8C63BB69

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:A9okuU5fXIrI3pzotqcoxDNylmM7ODNylmM76OWBYE1b:ax5fXnpzoYfxUmTUmzBYqb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:105951:FVDNIQtArDEAHilCBwokOJwg26QFIHYIBICqDDgCT2V1ATAuEKDmciBNEoEqMgvAyAjCkxAecCuCGEMSAMgBEDhQlAIECAS+

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f8fc3f3fffbffff
Perceptual Hash:e9399292c74d6d92
Difference Hash:921c126208020008
Wavelet Hash:7b060343cec0c0ff
Color Hash:N/A

Other Hashes

Crop Resistant:921c126208020008

Scan History

Scan history not available

Unable to load historical scan data