Security Scan: Webmail Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b6f2d32b-14e5-4821-b8b9-ecfcc7f1eef2 Domain and IP registration (RDAP)/api/v1/rdap/b6f2d32b-14e5-4821-b8b9-ecfcc7f1eef2How often this domain was scanned/api/v1/domain/stats/aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh.pages.dev Scan history for this domain/api/v1/domain/history/aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh.pages.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 20 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh.pages.dev/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake cPanel webmail login on a random pages.dev subdomain that harvests email passwords and can ship them to a Telegram bot; clear credential phishing, do not enter any credentials.

Risk Factors (6)

Phishing login form collecting email address and password

Impersonation of cPanel webmail branding on an unrelated pages.dev subdomain

Telegram bot token embedded in inline script (credential exfiltration channel)

Cross-origin POST to ipapi.co for victim IP/geolocation profiling

Meaningless randomized subdomain inconsistent with any legitimate service

Form action javascript:void(0) with no legitimate authentication backend

Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Favicon Hash

MMH3: 1169503317

MD5: 957e23e532631c0f59e51682cdcc5c7f

Domain Name Analysis

The domain 'aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh.pages.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh'. The core label 'pages' covers 5 characters with two vowels and three consonants. It segments into one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.54s

Total Load Time

198 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:239 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software27% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

27%

social_media

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
20	4	-	-