Security Scan: Log in to PayPal

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c65b096d-7aae-40ed-bf8c-b755a5c7bea0 Domain and IP registration (RDAP)/api/v1/rdap/c65b096d-7aae-40ed-bf8c-b755a5c7bea0How often this domain was scanned/api/v1/domain/stats/sufmhg.com Scan history for this domain/api/v1/domain/history/sufmhg.com?limit=15

This website contacted 6 IPs in 4 countries across 5 domains to perform 20 HTTP transactions. The main domain is sufmhg.com and was registered 3 weeks ago.

Submitted URL: https://sufmhg.com/

Effective URL:

https://sufmhg.com/#/pages/landing/landing-airpods

Redirected

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Fake PayPal balance-credit page on an 8-day-old unrelated domain: clear brand impersonation, though no credential form was verified in the capture. Treat as phishing and avoid entering any data.

Risk Factors (4)

Brand impersonation: PayPal branding/login wording on a domain that is not PayPal's

Financial reward lure (€100 balance credit) with urgency-style eligibility wording

Domain only 8 days old and absent from Cisco Umbrella top 1M

Single-source malware-family (cobaltstrike-2) indicator on the hosting IP:port

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: 500824144

MD5: f024b106dd8ff4116f44b5150d5586a6

Domain Name Analysis

The domain name 'sufmhg.com' uses the commercial generic top-level domain (.com). Count 6 characters in 'sufmhg' containing 1 vowel alongside 5 consonants. Tokenizing the label suggests three words: suf, m, hg. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

PayPal Personal v Business ¥ Developer Claim your €100 balance If your account has been used for purchases before, you are eligible fora €100 balance credit. Terms and conditions apply. Deutsch |...

Page Load Overview

0.81s

Total Load Time

420 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:270 chars

Detector Agreement:100%

Language mismatch: Declared as de but detected as en

Website Classification

Primary Category

adult content45% confidence

Type: static

Method: ml+structural

All Detected Categories

adult content

45%

e-commerce shopping

33%

technology software

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	217.156.66.187	Chisinau, Chișinău Municipality, Moldova	AS48753Ava Host Srl
3	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
3	54.151.51.39Aws · CLOUD	San Jose, California, United States	AS16509Amazon.com, Inc.
3	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
3	50.18.108.197Aws · CLOUD	San Jose, California, United States	AS16509Amazon.com, Inc.
3	124.174.94.22	China	AS137718Beijing Volcano Engine Technology Co., Ltd.
20	6	-	-