Security Scan: Web Mail

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ed67c6ae-c99d-4e46-a000-9399bac2be65 Domain and IP registration (RDAP)/api/v1/rdap/ed67c6ae-c99d-4e46-a000-9399bac2be65How often this domain was scanned/api/v1/domain/stats/hawaiianart.org Scan history for this domain/api/v1/domain/history/hawaiianart.org?limit=15

This website contacted 9 IPs in 1 country across 7 domains to perform 10 HTTP transactions. The main domain is hawaiianart.org and was registered 9 years ago.

Submitted URL: https://hawaiianart.org/vc/diff.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised hawaiianart.org subpath serving a Korean fake webmail login with a CRITICAL hunting rule-flagged phishing kit that exfiltrates credentials to Telegram. Do not enter credentials.

Risk Factors (5)

CRITICAL hunting-rule match for a known credential-stealing phishing kit with Telegram exfiltration

Password-harvesting login form hosted on a domain unrelated to the claimed webmail service

Telegram bot token embedded in page script enabling live credential exfiltration

IDS alerts for external IP-lookup (ipinfo.io) and abused thumbnail service (image.thum.io), typical of kit geofencing

Phishing page planted on a compromised legitimate domain, lending it undeserved trust

Domain age information unavailable

Details

Page Title

Web Mail

Scan Type

public

Favicon Hash

MMH3: -959230595

MD5: c968b41da080db9f04e0ed370ce81b36

Domain Name Analysis

The domain 'hawaiianart.org' uses the non-profit oriented generic top-level domain (.org) without a subdomain. The core label 'hawaiianart' covers 11 characters holding 6 vowels versus 5 consonants. It segments into 2 words: hawaiian, art. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

a ofa! Ojoyied A Ojayiel A aed This site The webpage at https://undefined/ might be temporarily down or it may have moved permanently to a new web address. ERR_TUNNEL_CONNECTION_FAILED

Page Load Overview

1.42s

Total Load Time

202 KB

Total Size

Language Analysis

Primary Language

🇰🇷Korean

Code: ko

Confidence:60%

Script:Hangul

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:60 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as ko

Website Classification

Primary Category

phishing scam59% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

phishing scam

59%

adult content

46%

government public service

38%

healthcare medical

33%

news media journalism

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	136.0.111.42	United States	AS40676Psychz Networks
1	142.251.20.95Google · CDN	United States	AS15169Google LLC
1	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	34.232.78.185Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
1	34.117.59.81Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	52.55.196.165Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
10	9	-	-