Security Report: 5mail.store - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d9595418-6bc8-414c-8bc1-2ba8232482a9 Domain and IP registration (RDAP)/api/v1/rdap/d9595418-6bc8-414c-8bc1-2ba8232482a9How often this domain was scanned/api/v1/domain/stats/5mail.store Scan history for this domain/api/v1/domain/history/5mail.store?limit=15

This website contacted 11 IPs in 2 countries across 11 domains to perform 61 HTTP transactions. The main domain is 5mail.store and was registered 7 months ago.

Submitted URL: https://5mail.store/

Effective URL:

https://5mail.store/en/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Decoy 'temp mail' site running a fake-verification ClickFix lure: it tells visitors to paste a PowerShell command, while JavaScript pulls EtherHiding/Vidar malware C2 from a BNB Chain contract (4 CRITICAL IDS alerts). Do not paste or run anything.

Risk Factors (4)

ClickFix-style fake verification directing users to run a pasted PowerShell/Terminal command

EtherHiding malware exfiltration C2 over BNB Smart Chain smart contracts

Third-party resource flagged as Vidar infostealer malware

Decoy disposable-email page with no legitimate use of blockchain infrastructure

Domain age information unavailable

Details

Page Title

Free Temp Mail — Instant Disposable Email for Privacy | TempMail Pro | TempMail Pro

Scan Type

public

Favicon Hash

MMH3: 247329414

MD5: 7d11423c502cc50560493127bba36d67

Domain Name Analysis

The domain '5mail.store' uses the .store top-level domain without a subdomain. The registrable portion '5mail' spans 5 characters containing two vowels alongside 2 consonants; it also includes 1 digit. It segments into 2 words: 5, mail. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.65s

Total Load Time

527 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2,526 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate35% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

corporate

35%

technology software

26%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.21.42.32Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.21.63.106Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	54.85.8.229Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
5	172.67.199.186Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.67.170.144Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	52.57.221.121Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
5	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
61	11	-	-