Security Report: hilarious-souffle-0c25e6.netlify.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/064ef04c-0fda-4627-bf3e-e60b4ea48684 Domain and IP registration (RDAP)/api/v1/rdap/064ef04c-0fda-4627-bf3e-e60b4ea48684 Certificate Transparency/api/v1/ct/hilarious-souffle-0c25e6.netlify.app How often this domain was scanned/api/v1/domain/stats/hilarious-souffle-0c25e6.netlify.app Scan history for this domain/api/v1/domain/history/hilarious-souffle-0c25e6.netlify.app?limit=15

This website contacted 3 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is hilarious-souffle-0c25e6.netlify.app and was registered 22 years ago.

Submitted URL: https://hilarious-souffle-0c25e6.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake Roblox login page on a netlify.app subdomain that harvests usernames/passwords and exfiltrates them to a Telegram bot; flagged by Safe Browsing for social engineering. Confirmed phishing.

Risk Factors (5)

Brand impersonation of Roblox on an unrelated netlify.app subdomain

Credential capture form (username + password) on a fraudulent login page

Credential exfiltration via cross-origin POST to api.telegram.org (bot sendMessage endpoint)

Google Safe Browsing Social Engineering threat

Unranked domain with no reputation, hosted on a free instant-publish platform

Domain age information unavailable

Details

Page Title

Вход — Roblox

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'hilarious-souffle-0c25e6.netlify.app' is registered with subdomain 'hilarious-souffle-0c25e6'. The second-level label 'netlify' is 7 characters long holding two vowels versus five consonants. It segments into 3 words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.68s

Total Load Time

21 KB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru

Text Length:131 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing scam55% confidence

Type: static

Method: ml+structural

All Detected Categories

phishing scam

55%

entertainment media

45%

adult content

39%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	128.116.5.3	Frankfurt am Main, Hesse, Germany	AS22697Roblox
1	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
3	3	-	-