Security Scan Report: www.ma31lappcl13nt.abrdns.com

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 13 HTTP transactions. The main domain is abrdns.com and was registered 12 years ago.

Submitted URL: https://www.ma31lappcl13nt.abrdns.com/

AI Security Verdict

Low Risk

Confidence: 92%

3
Risk Score

Fake cPanel/Roundcube webmail login on a leetspeak subdomain asks for email address and email password, blocks analysis tools, and shows a login error—classic credential phishing.

Risk Factors (5)
Credential-harvesting webmail login form on a non-official domain
Brand impersonation of cPanel/Roundcube webmail
Deceptive leetspeak subdomain and page title
Anti-analysis JavaScript blocks DevTools and right-click
High-severity IDS alert for Spamhaus DROP-listed traffic
Safety Factors (5)
Base domain abrdns.com is approximately 12 years old
No payment fields detected
No cross-origin credential exfiltration detected in static analysis
No threat-intelligence matches or JavaScript malware patterns detected
The site's own login form (credentials submit to its own domain; 4394 days old) with no strong malicious indicators — a first-party sign-in is normal; risk clamped from 9 to 3
Domain age information unavailable

Details

Page Title

R0undcub3

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.ma31lappcl13nt.abrdns.com' is registered, featuring subdomain 'www.ma31lappcl13nt'. The core label 'abrdns' covers 6 characters containing 1 vowel alongside five consonants. Word splitting yields two words: ab, rdns. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.ma31lappcl13nt.abrdns.com/

Page Load Overview

5.91s
Total Load Time
171 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,304 chars
Detector Agreement:100%

Website Classification

Primary Category

social_media50% confidence
Type: webapp
Method: structural

All Detected Categories

social_media
50%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
464.89.163.225United States
AS401626Netiface America, Inc.
354.193.242.235Aws · CLOUDSan Jose, California, United States
AS16509Amazon.com, Inc.
3142.251.13.95Google · CDNUnited States
AS15169Google LLC
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
134--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T116031B3A24A4005706C681D93C3FA34979B6E317980A8E4CB47D8BD45F91F8FEDA3576

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:1uP4VNEvhfnGoqoofJ7kkIrTr5e6XJdPLsuzHy/cke3eyN:k4VNEvpSRkkIrTr5e6XJJ8eOyN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41384:jQApAhiAkBOgADAgsFATmRSQBhCCAKwglhB4EDkSEVTJxFI2h6FEhMsWGJJBCxhiIkJIqyoskhvRUAAxQaEuQAnmAGGAJBIt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:005a1818ff000000
Perceptual Hash:cccc6626a66633b3
Difference Hash:2cb23233b0881000
Wavelet Hash:10feffffff000000
Color Hash:N/A

Other Hashes

Crop Resistant:2cb23233b0881000

Scan History

Scan history not available

Unable to load historical scan data