Security Scan Report: mos022.com

Submitted: Sep 21, 2026, 7:56:38 AMCompleted: Sep 21, 2026, 7:57:14 AMpubliccompleted

This website contacted 4 IPs in 1 country across 4 domains to perform 11 HTTP transactions. The main domain is mos022.com and was registered 5 years ago.

Submitted URL: https://mos022.com

The Cisco Umbrella rank of the primary domain is #839,964 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Aged but unbranded site with a plain login form and an 'access via alternate domain' notice typical of mirror/alt-access portals. No malware, phishing IoC, or brand impersonation found — moderate risk only.

Risk Factors (4)
Login form with password field on an unbranded, low-reputation domain
Content directs users to an alternate access domain (hga038.com) instead of the official hostname
Third-party look-alike domains (niab12345.com subdomains) receive page resources
Signature of alternative/mirror-login portals used by restricted online services
Safety Factors (6)
Domain is 1479 days (~4 years) old — not a newly registered throwaway
No Indicators of Compromise matched against the page or its resources
No JavaScript malware / YARA patterns detected
No network IDS alerts
No cross-origin credential exfiltration and no disguised or payment fields
Form is a single self-hosted login (password + username) with no brand impersonation
Domain age information unavailable

Details

Page Title

Welcome

Scan Type

public

Domain Name Analysis

Domain 'mos022.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 6 characters in 'mos022' holding 1 vowel versus two consonants; bonus characters include 3 digits. It segments into 2 words: mos, 022. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mos022.com

Page Load Overview

18.27s
Total Load Time
53 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:935 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain99% confidence
Type: webapp
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
99%
documentation technical
99%
real estate property
99%
blog personal website
99%
government public service
99%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
566.133.89.130South Korea
AS133772New Eagle Ltd
2112.78.27.102South Korea
AS133772New Eagle Ltd
243.229.2.183South Korea
AS133772New Eagle Ltd
264.188.39.21South Korea
AS133772New Eagle Ltd
114--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19D24E57303096BEA96CE47B4706A204A71B5CCD7B4B8D0C4AB275904C5AD8D3FD6DFA8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:j+TO54gryAj/bDhtv4W1xaHvIZAz6wedOdYNhr+VF:KobDhuExaHvIpNZ+v

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:217901:4s8KN3QFCgCiqiEKLsgNA2BAV6IhITYEgEACFTEMYsJeVQgId44HEeAI7iVFiAswaQgJgXUQxIGbFCwYLgCARFUDFBwUG4OA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00efe7ffffffffff
Perceptual Hash:b3674c1919195f66
Difference Hash:324d4c1a08080810
Wavelet Hash:0024e0e0e3e3e3fb
Color Hash:#ac6553

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data