Security Report: vpnaegis2.site - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9c256707-1da2-4c9a-ade8-3370d8f1528b Domain and IP registration (RDAP)/api/v1/rdap/9c256707-1da2-4c9a-ade8-3370d8f1528bHow often this domain was scanned/api/v1/domain/stats/vpnaegis2.site Scan history for this domain/api/v1/domain/history/vpnaegis2.site?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 21 HTTP transactions. The main domain is vpnaegis2.site and was registered 4 days ago.

Submitted URL: https://vpnaegis2.site/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Days-old domain posing as a VPN service that runs a phone -> 'administrator verification' -> card-details funnel and embeds a Telegram bot token to exfiltrate what users submit. Do not enter any data.

Risk Factors (6)

Card number, expiry and CVC fields collected on a days-old unknown domain

Telegram bot token embedded in page script enabling covert exfiltration of submitted data

Phone-number and 'answer the administrator's question' steps that gate the payment flow

Newly registered domain (3 days) with no reputation

Single-source phishing threat-intelligence report on the primary domain

The page claims 'no logs' / 'military encryption' branding with no verifiable company, terms or contact information

Domain age information unavailable

Details

Page Title

AEGIS VPN — Премиум защита

Scan Type

public

Favicon Hash

MMH3: -387710338

MD5: 2f744eb134fa4f9a5904ee4bbdab8350

Domain Name Analysis

The domain 'vpnaegis2.site' uses the .site top-level domain and has no subdomain. The second-level label 'vpnaegis2' is 9 characters long containing three vowels alongside 5 consonants; bonus characters include 1 digit. Breaking it apart gives 3 words: vpn, aegis, 2. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.43s

Total Load Time

590 KB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru

Text Length:1,174 chars

Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain90% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

90%

technology software

87%

documentation technical

77%

phishing scam

74%

government public service

73%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	193.233.75.208	Frankfurt am Main, Hesse, Germany	AS209207Digital Hosting Provider LLC
7	142.251.110.95Google · CDN	United States	AS15169Google LLC
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
21	3	-	-