ScanMalware.com

Security Scan Report: posthog.carestack.com

Redirected to: https://posthog.carestack.com/login?next=/

Site favicon
Submitted: Jan 8, 2026, 5:45:34 PMCompleted: Jan 8, 2026, 5:47:07 PMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 1 country across 4 domains to perform 30 HTTP transactions. The main domain is posthog.carestack.com and was registered NaN years ago.

Submitted URL: https://posthog.carestack.com

Effective URL: https://posthog.carestack.com/login?next=/Redirected

The Cisco Umbrella rank of the primary domain is #173,271 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

High‑risk phishing page impersonating PostHog on an unrelated domain

Risk Factors
Brand impersonation: PostHog branding on a non‑official domain
Credential harvesting form on a domain unrelated to the brand
Low Cisco Umbrella ranking for a site claiming a well‑known brand
Domain age information unavailable

Details

Page Title

Login • PostHog

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

adult content

(41%)

Domain Information

Within the commercial generic top-level domain (.com), 'posthog.carestack.com' is registered and includes subdomain 'posthog'. Its registrable label 'carestack' stretches across 9 characters split between 3 vowels and six consonants. It segments into two words: care, stack. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://posthog.carestack.com

Page Load Overview

25.42s
Total Load Time
109
HTTP Requests
2
Domains
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:86 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content41% confidence
Type: webapp
Method: ml+structural

All Detected Categories

adult content
41%
news media journalism
33%
entertainment media
31%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1954.90.36.212United States
AS8075
1818.66.92.30United States
AS13335
1820.185.211.196Washington, Virginia, United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
1818.66.92.11United StatesUnknown
18104.18.1.22United StatesUnknown
183.95.129.122United StatesUnknown
1096--

Detected Technologies3

PasswordField
100%
Envoy
40%
Unpkg
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C533D9AEC6D9B42730D411F12EB6947EE937854E48195E21348E2549038EAE37CFE7BC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:oGBnj2jKSz9RPnMTnemYilFFeUhaQtZWwQ7WFdR+Q8DfmJRud:oGBn6Vz9RYtFFeUhaQe6FdRd8Dfmud

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:50157:JAiKDZhIFF2IACCQBMAA6Ma9DUAAIABABkYUGIJiLkcQCJzwBYEUQ8lqRlBqEgABETfjxgLweEgAVBswlQi+EAFCIAmAA9CM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffcfc3cfffff
Perceptual Hash:b1c6ce3831c7ce64
Difference Hash:003044999e966010
Wavelet Hash:ccccc0ccc0ccf0ff
Color Hash:#8cbf40

Other Hashes

Crop Resistant:003044999e966010,e1101976766e64e4

Scan History

Scan history not available

Unable to load historical scan data