Security Scan Report: www.cmail-geogle.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 1 country across 11 domains to perform 18 HTTP transactions. The main domain is cmail-geogle.com and was registered 2 days ago.

Submitted URL: https://www.cmail-geogle.com/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Analyst-vetted kit roster identifies this host as a Google sign-in phishing operator on a Google-lookalike domain (cmail-geogle.com); current page is a decoy newsletter, treat as malicious.

Risk Factors (3)
Known malicious phishing kit identified by analyst-vetted kit roster on this HTML body
Google-lookalike/deceptive domain name
Content on the host does not match the operator's apparent phishing purpose, consistent with a kit's default/decoy landing page
Domain age information unavailable

Details

Page Title

Top Cay Xanh

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.cmail-geogle.com' is registered with subdomain 'www'. The registrable portion 'cmail-geogle' spans 12 characters split between five vowels and six consonants, along with one hyphen. Word splitting yields four words: c, mail, ge, ogle. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.cmail-geogle.com/

Page Load Overview

1.35s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:587 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: static
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.67.153.24Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.88.204Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1104.17.62.238Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.64.149.80Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.142.10.81Aws · CLOUDColumbus, Ohio, United States
AS16509Amazon.com, Inc.
1104.19.252.91Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.94Google · CDNUnited States
AS15169Google LLC
1104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.19.253.91Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1816--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14D72A437A1700119322FE524E481B79A7257430BD7975BF0BAA99136EFC5EEA09233CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:CF8NG4S0OWUyF4S0bWUynOX8jMAysr3/t+BH4S0xWUyK5Hivr+5:CF8Fjbysr3/krK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17410:OaABgR0ywJk0A0BBQkI4gCeEMZrUEwXg6EA5RlkAAwMFIMKIbIhANVBoAQwMKFhtFMAYEoKL0kYCQoIg5IQhSAqBoICGMIAL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdf8b800001018ff
Perceptual Hash:ca759102f50ae55f
Difference Hash:2921232765e1e99d
Wavelet Hash:fdf8f89100003cff
Color Hash:#bf409f

Scan History

Scan history not available

Unable to load historical scan data