Security Scan Report: airepagos.st

Site favicon
Submitted: Jun 25, 2026, 11:31:28 PMCompleted: Jun 25, 2026, 11:34:27 PMpubliccompleted

Summary

This website contacted 1 IP in 1 country across 12 domains to perform 3 HTTP transactions. The main domain is airepagos.st and was registered 9 months ago.

Submitted URL: https://airepagos.st/consulta-factura-aire

AI Security Verdict

Low Risk

Confidence: 92%

3
Risk Score

The site impersonates the AIR‑E utility brand, collects personal data via forms, and is linked to malicious IP and Spamhaus DROP traffic – confirmed phishing scam.

Risk Factors
Brand impersonation of AIR‑E on unrelated domain
Credential‑type form collecting personal identifiers
Threat‑intel match to known malicious IP
High‑severity IDS alert (Spamhaus DROP)
Unranked domain (no Cisco Umbrella reputation)
Safety Factors
Physical address visible on page
SSL/TLS encryption (HTTPS) present
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 10 to 3
Domain age information unavailable

Details

Page Title

Consulta Factura AIR-E Gratis | Verifica tu Deuda 2025

Scan Type

public

Language

🇪🇸

Spanish

(80% confidence)

Category

finance banking

(85%)

Domain Information

You're looking at domain 'airepagos.st' on the .st country-code top-level domain with no subdomain. The registrable portion 'airepagos' spans 9 characters holding five vowels versus 4 consonants. Breaking it apart gives 2 words: aire, pagos. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://airepagos.st/consulta-factura-aire

Page Load Overview

90.39s
Total Load Time
113
HTTP Requests
12
Domains
785 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:es
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:es-ES
Text Length:9,410 chars
Detector Agreement:80%

Website Classification

Primary Category

finance banking85% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
85%
corporate business
62%
adult content
47%
government public service
32%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
113193.143.1.226Moscow, Moscow, Russia
AS198953Proton66 OOO
1131--

Page Statistics

113
Requests
12
Unique Domains
3.8 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T175941D84BE11792E3AF2521EC0D7D27FF398754A962C7A68B2DD528CCF5DE41C41AA30

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:R/9VgFD2iasezs3qlPgcdIvqNIFBKzpvIZU0UBDxdBqhYwG1GWG9BxH962TTW0Cv:R/d1xqWL28JqRZChYDtAHjqM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:420324:EFAoFyYwPkGZpoNoSFEliI4GQBoEGFMSw2AUORQUUMAATQEAHpQBiAAE1UCoDAILkmgEgAtYK0CFFi5M4mSmAkwFhZbCyhAN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc3c7ffffffff
Perceptual Hash:b331cccccc673323
Difference Hash:00180c1400000000
Wavelet Hash:ffdfc3cf00000000
Color Hash:#87aac5

Other Hashes

Crop Resistant:00180c1400000000

Scan History

Scan history not available

Unable to load historical scan data