Is purchaser.alapact.com safe?

The scan of purchaser.alapact.com on 20 Aug 2026 reached no verdict either way (score 14). Too little was captured to judge it, which is an unknown rather than a pass.

How was purchaser.alapact.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

purchaser.alapact.com - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned purchaser.alapact.com and returned a unknown verdict (score 14), categorised as credential-harvest. The page resolved to 52.61.92.140 on Amazon.com, Inc. in US. The domain was registered 8476 days ago through GoDaddy.com, LLC. 2 domains and 2 IPs were contacted, over 7 HTTP requests. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 14) · Confidence 23%
Scanned URL: https://purchaser.alapact.com/login?ReturnUrl=%2F
Domain: purchaser.alapact.com · IP: 52.61.92.140 · AS8987 · US
Page title: Login
HTTP status: 200 · text/html; charset=utf-8
Registrar: GoDaddy.com, LLC · domain age 8476 days · created 2003-06-05
TLS issuer: C=US, O=GoDaddy.com, CN=GoDaddy TLS Intermediate CA DV - R1v1 · valid to Mar 5 21: · subject CN=college.alapact.com
HTTP requests captured: 7 · cookies set: 1 · outgoing links: 2
Scan tier: standard · observed 2026-08-20 03:40:16 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post
Certificate issued < 48h ago

Detected technologies

jQuery

Contacted infrastructure

52.61.92.140 - AS8987 Amazon.com, Inc. (United States)
23.33.238.171 - AS20940 Akamai Technologies, Inc. (Australia)

Observed indicators

purchaser.alapact.com
ajax.aspnetcdn.com
52.61.92.140
23.33.238.171
https://purchaser.alapact.com/login?ReturnUrl=%2F
https://purchaser.alapact.com/favicon
https://purchaser.alapact.com/css/main.min.css?v=gSSSIH3bI1c_lZZXBS_npMg9qREcaDC5tWPHZ-goi3E
https://purchaser.alapact.com/css/login.min.css?v=BFxDLGGTBb5QUHD19kn-3G_01vmfWULu4ySVGI0fJeg
https://purchaser.alapact.com/login?returnurl=%2F
https://purchaser.alapact.com/register
https://purchaser.alapact.com/account/password/forgot
https://ajax.aspnetcdn.com/ajax/jquery/jquery-3.3.1.min.js

Questions about purchaser.alapact.com

Is purchaser.alapact.com safe?: The scan of purchaser.alapact.com on 20 Aug 2026 reached no verdict either way (score 14). Too little was captured to judge it, which is an unknown rather than a pass.
How was purchaser.alapact.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of purchaser.alapact.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan