Security Scan Report: ahamails.com

Redirected to:
https://ahasend.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 5 domains to perform 135 HTTP transactions. The main domain is ahamails.com and was registered 1 week ago.

Submitted URL: http://ahamails.com/

Effective URL:
https://ahasend.com/
Redirected

AI Security Verdict

Safe Website

Confidence: 85%

0
Risk Score

AhaSend's own transactional-email product site; the ahamails.com → ahasend.com redirect is a domain move, not impersonation. No forms, no credential collection and no threat-intelligence, YARA or IDS hits.

Safety Factors (5)
Self-branding confirmed: title, Open Graph site name and meta description all say AhaSend and match the final domain ahasend.com
Zero forms, zero password/payment fields, zero cross-origin script targets
Threat-intelligence, YARA, kit-roster, native-YARA and IDS sections are all clean
All JavaScript served from the site's own domain; no third-party script hosts
Content is coherent, detailed product documentation consistent with a real email-infrastructure provider
Domain age information unavailable

Details

Page Title

AhaSend - Transactional Email and Campaigns, Delightfully Boring

Scan Type

public

Domain Name Analysis

Domain 'ahamails.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'ahamails' stretches across 8 characters containing four vowels alongside 4 consonants. It segments into two words: aha, mails. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://ahamails.com/

Page Load Overview

3.46s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:13,290 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical67% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
67%
technology software
46%
corporate
35%
government public service
33%
news/blog
20%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23104.21.35.26Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16172.67.132.115Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16167.235.220.62Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
16168.119.244.14Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
1695.217.168.67Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
16104.21.4.210Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16172.67.212.71Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16162.55.154.78Nuremberg, Bavaria, Germany
AS24940Hetzner Online GmbH
1358--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11AA41BA1D3D0DA2B716789DDFC71FE3D714583C9CA46885D9DFEC2B283D24B86182688

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:XBQ1AVt9eZ6bkbRA0ijlgTi/li8QqqkSKozD7DL3wom1feX+Yw:Xt9eak+0EjqJKBomR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:474993:IaEEYICCEegGXjYChcWNNQjMjgMBApEG09agBCchKBCEv4UEIAE8BQAFAAcVykDQlZQkEaE65AIEScwARSTQJMFsFgqLC2ug

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:02003c3c1810d8c0
Perceptual Hash:dc03742493dc17f9
Difference Hash:b6157161b3352119
Wavelet Hash:5f003c3c3cd8d8d9
Color Hash:#2dd24e

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data