Security Scan: Webmail Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d3cb8ccf-b9ed-4a86-b809-51ecda072d63 Domain and IP registration (RDAP)/api/v1/rdap/d3cb8ccf-b9ed-4a86-b809-51ecda072d63How often this domain was scanned/api/v1/domain/stats/aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh.pages.dev Scan history for this domain/api/v1/domain/history/aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh.pages.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 20 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh.pages.dev/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake cPanel webmail login on a throwaway pages.dev subdomain that harvests email passwords and ships them to a Telegram bot — classic credential phishing.

Risk Factors (6)

Brand impersonation of cPanel webmail on a non-cPanel domain

Password field present in a form on a shared hosting-platform subdomain with unknown creation date

Telegram bot exfiltration channel built into the page script

External geolocation/IP lookup from page JavaScript

Nonsensical random-character hostname typical of throwaway phishing infrastructure

No domain-level reputation (unranked in Cisco Umbrella)

Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Favicon Hash

MMH3: 1169503317

MD5: 957e23e532631c0f59e51682cdcc5c7f

Domain Name Analysis

You're looking at domain 'aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh.pages.dev' on the developer-focused generic top-level domain (.dev) with subdomain 'aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh'. The second-level label 'pages' is 5 characters long split between two vowels and three consonants. It segments into 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Webrnai/ Email Address Enter your email address. Password Enter your email password English aya! = Gnraponn == GeStina © dansk == Deutsch -——EAANVIKtt~——_espafiol latinoamericano cP (Copyright©...

Page Load Overview

0.59s

Total Load Time

198 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:239 chars

Detector Agreement:50%

All Detected Languages

🇺🇸en(100%)🇳🇴no(0%)

Website Classification

Primary Category

gambling betting58% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

gambling betting

58%

government public service

34%

education learning

30%

technology software

27%

news media journalism

26%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
20	4	-	-