Security Scan Report: webmail.costelia.it

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 15 HTTP transactions. The main domain is costelia.it and was registered 6 months ago.

Submitted URL: https://webmail.costelia.it

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Self-hosted Roundcube webmail login on a 179-day-old domain. Same-origin form, no impersonation, no threat-intel, hunting rule or IDS hits — typical of a small provider's mail portal, but reputation is unverified.

Risk Factors (2)
Credential login form on a relatively young (179-day) domain with no established reputation
Generic 'mimics legitimate service' flag from Roundcube branding, though this is standard webmail software the host appears to actually run
Safety Factors (4)
Login form posts to the same origin as the page (no external form action)
No credential exfiltration or suspicious JavaScript behaviour detected
Self-branding matches the site's own domain; no impersonation of another organisation
Zero Indicators of Compromise, hunting rule, kit-roster or Suricata hits
Domain age information unavailable

Details

Page Title

Roundcube Webmail :: Welcome to Roundcube Webmail

Scan Type

public

Domain Name Analysis

Domain 'webmail.costelia.it' uses the Italian country-code top-level domain (.it) and includes subdomain 'webmail'. Count 8 characters in 'costelia' split between 4 vowels and four consonants. Splitting it apart reveals two words: cost, elia. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://webmail.costelia.it

Page Load Overview

0.44s
Total Load Time
364 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:238 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical45% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
45%
phishing scam
42%
technology software
42%
news media journalism
36%
adult content
36%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15167.235.234.107Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
151--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A2C10941AC088F37106204F874CEF78858FE816AD7206C58B9FC818E4FA0F6985F2AB1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:NUi9wiL9dtUtENUJoZPhwNDGFAEOMJgHvhru6tUgw:eHm9TU6KJodhwNDGFAdMJgZTtUgw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5862:AABQYGNADQIIABJOAGICCBAkIRAAMEBkgYKKAAJAIQKDqJGQEESgSAAF0RgSAIohyACEkQwLxgEAoMDGqBqAUGAEjIDEBEQA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7ffffffff
Perceptual Hash:b333cccc64339999
Difference Hash:00080c0c00000000
Wavelet Hash:3f27272700000000
Color Hash:070000001c0

Other Hashes

Crop Resistant:00080c0c00000000

Scan History

Scan history not available

Unable to load historical scan data