PasswordField
This signal marks a page that contains an HTML password input field — in other words, a login or credential-entry form. ScanMalware records it from the page’s form elements.
A password field is central to phishing analysis: a credential form on an unexpected, newly registered or lookalike domain is a strong prompt to examine where the submitted data is sent and how the page scores overall.
Commonly deployed alongside PasswordField
Of the 39,345 public scans where PasswordField was detected, these are the technologies most often present on the same site. The share is the percentage of PasswordField sites that also ran each one.
| Technology | Category | Share of PasswordField sites |
|---|---|---|
| HSTS | wappalyzer | 44.37% |
| X-UA-Compatible | miscellaneous | 41.94% |
| jQuery | wappalyzer | 39.17% |
| HTTP/3 | wappalyzer | 30.63% |
| JQuery | miscellaneous | 30.14% |
| Cloudflare | wappalyzer | 26.78% |
| Cloudflare Bot Management | wappalyzer | 20% |
| Google Analytics | wappalyzer | 19.81% |
| Open-Graph-Protocol | miscellaneous | 18.82% |
| Ghost | cms | 18.21% |
| Meta-Refresh-Redirect | miscellaneous | 16.92% |
| Google-Analytics | miscellaneous | 15.68% |
| Microsoft ASP.NET | wappalyzer | 13.08% |
| PoweredBy | miscellaneous | 11% |
How ScanMalware detects PasswordField
PasswordField is detected by analysing the response headers, HTML markup, JavaScript runtime and asset URLs captured when ScanMalware loads the site in a real headless browser.
From any scan you can pivot into related signals — JARM TLS fingerprints, ASN ownership and BGP routing, certificate history, JavaScript analysis and the overall security verdict — to understand not just that PasswordField is present, but how it is being used. Open the full search interface for PasswordField →
Recent public scans featuring PasswordField
A rolling sample of recent public scans where PasswordField was detected. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| HockeySlovakia.sk | oficiálny web slovenského hokeja https://www.hockeyslovakia.sk | 2026-11-04 |
| HeadlineLogic News Portal https://itinijo.top | 2026-11-04 |
| Sign in to your account https://eur.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.powerplatf… | 2026-11-04 |
| Roundcube Webmail :: Welcome to Roundcube Webmail https://webservice-mailupdatemail.arqanexportcompany1664.workers.dev/ | 2026-11-04 |
| Mail https://pub-614b6a8544664ad7845f0c49488560a3.r2.dev/bins.htm | 2026-11-04 |
| Webmail Sign In https://pub-2cdee1613ecb4412af6d8596351bbd87.r2.dev/salscrypt.htm | 2026-11-04 |
| https://pub-e5c2c5311c064a7bb152dc2d6b4b0d49.r2.dev/2_5474357000.html | 2026-11-04 |
| mup https://webmail-09876567866576587698678578546335970984567878576889.pages.dev/9856657898765… | 2026-11-04 |
Frequently asked questions about PasswordField
- Does using PasswordField mean a website is unsafe?
- No. PasswordField is a stack component, not a verdict. ScanMalware scores the whole page — its scripts, redirects, certificates, threat-intelligence matches and behaviour — so a site using PasswordField can be perfectly safe or actively malicious.
- How many sites using PasswordField has ScanMalware scanned?
- PasswordField has been detected in 39,345 public scans on ScanMalware.com. Each scan is a real headless-browser visit, and the figure updates as new URLs are submitted.
- What technologies are commonly used with PasswordField?
- Across scanned sites, PasswordField is most often seen alongside HSTS, X-UA-Compatible and jQuery. The full co-occurrence breakdown is listed on this page.
Browse all profiled technologies on the technology index, or scan a URL to see its full stack.