Security Scan Report: moonlit-horse-8b9a8d.netlify.app

Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 12 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://moonlit-horse-8b9a8d.netlify.app/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Fake Instagram login page hosted on a netlify.app subdomain, harvesting username and password. Not affiliated with Meta/Instagram.

Risk Factors (5)
Brand impersonation of Instagram/Meta on a domain that does not match the brand
Credential-collecting login form (password + identifier) on a shared hosting subdomain
Subdomain creation date unknown; parent platform age is not attributable to this page
Unranked domain with no legitimate reputation
IDS heuristics flag Netlify-hosted content as a possible phishing landing
Domain age information unavailable

Details

Page Title

Instagram

Scan Type

public

Domain Name Analysis

The domain name 'moonlit-horse-8b9a8d.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'moonlit-horse-8b9a8d'. The registrable portion 'netlify' spans 7 characters holding two vowels versus five consonants. It segments into 3 words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://moonlit-horse-8b9a8d.netlify.app/

Page Load Overview

6.60s
Total Load Time
155 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:257 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network85% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
85%
technology software
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
463.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
2157.240.0.63Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2157.240.0.174Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
125--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16172B32255B382BB646FF5A827E273EA34639307F302DBC4B99D17D40F92C5719A3648

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:NQuiI2FYTRdN4lRFS1TLrgLENyWu4fRDk8WeHEjHkvUNtKqz1DW52VurfIvE:NQui4TRdNT3Dk8WuEjHkvktKqg24t

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16257:lmDcT3KI+gRIAigAgIcAcI0EiTuCKICGACFAxhAG5nEjVP0gAc4SQAU2ihMA8AAA0iYMngAEICzBqIblUOwLmhTwCkAPZKAK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7ffe7ffe2
Perceptual Hash:f7aa55a855aa5588
Difference Hash:08300c4c280c110c
Wavelet Hash:c3dbe3e307070e02
Color Hash:#4c931f

Other Hashes

Crop Resistant:08300c4c280c110c

Scan History

Scan history not available

Unable to load historical scan data