Security Scan Report: servicefrroumbourse.netlify.app

Submitted: Completed: publiccompleted
This website contacted 27 IPs in 4 countries across 19 domains to perform 126 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://servicefrroumbourse.netlify.app/srevice

AI Security Verdict

Confirmed Scam

Confidence: 80%

9
Risk Score

Fake telecom 'refund service' on a free Netlify subdomain that collects personal details and a card-style number via fabricated operator branding and testimonials. Do not enter data.

Risk Factors (5)
Deceptive hostname on free instant-hosting subdomain impersonating a refund/telecom service
Payment/card-style data collection on an unaffiliated site
Use of telecom operator branding/logos with no disclosed affiliation
Fabricated testimonials and trust seals
Cross-origin POSTs plus Telegram Bot API contact indicating an off-platform data channel
Domain age information unavailable

Details

Page Title

Refund – Refund Service

Scan Type

public

Domain Name Analysis

The domain 'servicefrroumbourse.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'servicefrroumbourse'. The registrable portion 'netlify' spans 7 characters containing two vowels alongside five consonants. Segmentation suggests three words: net, li, fy. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://servicefrroumbourse.netlify.app/srevice

Page Load Overview

1.98s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,917 chars
Detector Agreement:50%

Website Classification

Primary Category

finance banking54% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
54%
adult content
33%
government public service
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
4185.15.59.240United States
AS14907Wikimedia Foundation Inc.
4146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
4172.217.116.4Google · CDNUnited States
AS15169Google LLC
493.20.64.1Orléans, Centre-Val de Loire, France
AS15557Societe Francaise Du Radiotelephone - SFR SA
423.201.241.102Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
4192.178.183.138Google · CDNUnited States
AS15169Google LLC
4104.26.8.142Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.26.2.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12627--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12644E65757B308722C5B237DABEBB2003A609413E90CFD647DED92A48FC87E9056276D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/WtVntyHp2K+winylPXktBJE1HKsUrv+qdTnn8gj/JoYH/1xr+/zFeyZU65xMT9X:/WwiTp8gj/JoYf1xuj8rfUy9RMw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:275414:ZXTQURhyMDQGFuki4KAwAEC7EQwZqDpBQAUkBFwAMHIzRDGCICREN2FSDiUigQZIiwYCMAAlInj4ouEyonRoQCgSQclFcQDA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000e7c7c7c7ff
Perceptual Hash:b04fcfb0c5b0cf30
Difference Hash:210d718d8d9d9d8c
Wavelet Hash:e10000c7c7c7c7ff
Color Hash:#53ac62

Scan History

Scan history not available

Unable to load historical scan data