ScanMalware.com

Security Scan Report: webmail.geicobillingcenter.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b2c5e2b5-8f9f-4bd2-a022-2e16f5a4fa48Domain and IP registration (RDAP)/api/v1/rdap/b2c5e2b5-8f9f-4bd2-a022-2e16f5a4fa48How often this domain was scanned/api/v1/domain/stats/webmail.geicobillingcenter.comScan history for this domain/api/v1/domain/history/webmail.geicobillingcenter.com?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 13 HTTP transactions. The main domain is geicobillingcenter.com and was registered 8 months ago.

Submitted URL: https://webmail.geicobillingcenter.com

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Safe Browsing social-engineering hit plus a password login on a brand-lookalike webmail hostname indicates a credential phishing page; avoid entering credentials.

Risk Factors (4)
Google Safe Browsing Social Engineering flag
Password credential collection form on a suspicious webmail login page
Brand-lookalike hostname suggesting GEICO billing
Unranked domain with unknown age
Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Domain Name Analysis

The domain 'webmail.geicobillingcenter.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'webmail'. The second-level label 'geicobillingcenter' is 18 characters long split between 7 vowels and 11 consonants. It segments into 3 words: geico, billing, center. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

ayyell Webrnai/ Email Address 2 enter your email address. Password @ Enter your email password. Reset Password Gestina dansk —=—Deutsch_~——EAAnviket’ = English espafiol <P Copyright© 2025 cPa...

Page Load Overview

12.66s
Total Load Time
124 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,299 chars
Detector Agreement:50%

All Detected Languages

🇺🇸en(92%)🇮🇹it(8%)

Website Classification

Primary Category

technology software46% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
46%
documentation technical
42%
government public service
37%
corporate business
37%
news media journalism
34%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13104.21.1.198Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.67.129.225Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
132--

Detected Technologies3

PasswordField
100%
HTTP/3
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19603292720F90473059A44D93C6F671D29BAE323990B8D48B47D8BD48FA2FCFE8A3555

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:xizWD/ZmXg8EZcIl0VnU0ZyFhqoD/ZHyXPJ7kkXYrHefyB+5yH+ycR3PydLbFobn:kyTZmXg81VnUxqoofJ7kkIrTr5e6XS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:40102:2QCh0WhIAiURRAHOLDgJxxIqQAqwWJNpgky0EBkkyAAgMkRDYCgwjoARKKcYpQADZAshBgCd8LMBQqHTsAQoAohCnHFwEowh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7c3e7ffff
Perceptual Hash:b333cccc66329999
Difference Hash:0c0c080c06080000
Wavelet Hash:3f27272700243c3c
Color Hash:070000180c0

Other Hashes

Crop Resistant:0c0c080c06080000

Scan History

Scan history not available

Unable to load historical scan data