Security Scan: Pro Mailer V2.1

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b67df135-e53d-48ca-b8f0-ccd92b65e3af Domain and IP registration (RDAP)/api/v1/rdap/b67df135-e53d-48ca-b8f0-ccd92b65e3afHow often this domain was scanned/api/v1/domain/stats/uphillconsulting.co.za Scan history for this domain/api/v1/domain/history/uphillconsulting.co.za?limit=15

This website contacted 2 IPs in 2 countries across 3 domains to perform 5 HTTP transactions. The main domain is uphillconsulting.co.za and was registered 17 years ago.

Submitted URL: https://www.uphillconsulting.co.za/mailer/1.html

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Covert bulk-mailer script hosting an SMTP credential form, with a CRITICAL IDS web-shell (base64_decode eval) alert and malware threat-intel listings on the domain and URL. Do not submit credentials.

Risk Factors (4)

Critical IDS detection of a base64_decode eval web shell on the server

Hidden mailer script used to send bulk mail and harvest SMTP credentials

Threat-intelligence malware listings on both the domain and this exact URL (single-source, unverified)

Page hidden in a /mailer/ subdirectory rather than linked site content

Domain age information unavailable

Details

Page Title

Pro Mailer V2.1

Scan Type

public

Domain Name Analysis

Domain 'www.uphillconsulting.co.za' uses the South African country-code top-level domain (.co.za), featuring subdomain 'www'. The second-level label 'uphillconsulting' is 16 characters long split between five vowels and 11 consonants. Splitting it apart reveals 2 words: uphill, consulting. Expect 8 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

g 7 {e ider C) en = S 77 ® OX ‘nb @ er Im) Hai g 7 EMAILS SMTP Pass: SMTP Server Smip: (optional SMTP Login: Port Reconnect ker: "Ifyou dont have SMTP login, leave blank queries ab...

Page Load Overview

10.19s

Total Load Time

55 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:56%

Script:Latin

Direction:ltr

Detection Details

Text Length:429 chars

Detector Agreement:100%

All Detected Languages

🇫🇷fr(66%)🇺🇸en(34%)

Website Classification

Primary Category

technology software49% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

49%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	102.65.21.24	South Africa	AS328453Web Africa Networks (Pty) Ltd
1	192.0.77.40	San Francisco, California, United States	AS2635Automattic, Inc
5	2	-	-

Detected Technologies3

PasswordField

100%

JQueryv1.6.2

100%

Apache HTTP Server

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13E729522DBC01F2AA5099081E752FEC97DE4A26B53210B447AAC73F3AFD595C052B3CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:JVVrXOevb3x+2RrwKEf2Ih3W8sYE/Kf0DrET5rE+j9EykjBpENqefbNqYZEdrP4G:DvbQ2RUDm8sPQst

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16221:OjD6KDAAAXSsBFRIEAGAc2goCQ4zAjGRwLQQA7AtKUFKFGhehAfGBIZ4GBTEjAFxwBhRgElYC1yAVFFAAABoeBGoUAAAAOeQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:81818181ffedffff

Perceptual Hash:eb2e94d1843ff284

Difference Hash:0f4f0f6749c96180

Wavelet Hash:c7008081a1edbfff

Color Hash:07000038000

Other Hashes

Crop Resistant:0f4f0f6749c96180,0000004040408000,0080404040000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: www.uphillconsulting.co.za