Security Scan: 269aa88832d9dc49138e884d81b3378d5e56

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d948e5c3-b4ff-45b1-885b-11bcc725468b Domain and IP registration (RDAP)/api/v1/rdap/d948e5c3-b4ff-45b1-885b-11bcc725468bHow often this domain was scanned/api/v1/domain/stats/grogoljaya.com Scan history for this domain/api/v1/domain/history/grogoljaya.com?limit=15

This website contacted 14 IPs in 2 countries across 10 domains to perform 17 HTTP transactions. The main domain is grogoljaya.com and was registered 18 years ago.

Submitted URL: https://grogoljaya.com/wp-content/autodiscover/whois/secure.html#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised WordPress site hosting a credential-phishing kit: password form, victim email planted in the URL fragment, and a Telegram bot token exfiltrating captured logins. Do not enter credentials.

Risk Factors (5)

Credential capture form on a hijacked WordPress path (compromised-site phishing)

Victim-specific email address injected into the URL fragment

Telegram bot token in page script indicating credential exfiltration

Page presents itself as an unrelated hex-string domain (269aa88832d9dc49138e884d81b3378d5e56.net) rather than the site's own brand

Anti-analysis: right-click/context menu blocked

Domain age information unavailable

Details

Page Title

269aa88832d9dc49138e884d81b3378d5e56

Scan Type

public

Favicon Hash

MMH3: 1974283886

MD5: fab72728f6bd95c12726a1f57b3cd759

Domain Name Analysis

The domain name 'grogoljaya.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'grogoljaya' is 10 characters long containing four vowels alongside six consonants. Word splitting yields three words: gro, gol, jaya. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.42s

Total Load Time

466 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:191 chars

Detector Agreement:50%

Website Classification

Primary Category

phishing scam66% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

phishing scam

66%

adult content

51%

government public service

44%

finance banking

43%

news media journalism

42%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	103.18.239.162	Indonesia	AS45711Imediabiz Indonesia
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	52.6.129.0Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	18.245.46.23Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
17	14	-	-