Security Scan Report: quiet-seahorse-393bb9.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 8 domains to perform 10 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://quiet-seahorse-393bb9.netlify.app/?utm_source=sniply&utm_campaign=sniply&utm_medium=sniply

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake pCloud file-transfer page on a Netlify subdomain asking for email credentials, with a Telegram bot token in its script to exfiltrate them — definitive phishing, do not enter anything.

Risk Factors (5)
Brand impersonation of pCloud on a non-official domain
Credential-harvesting login form (email + password)
Telegram bot token embedded in inline script for exfiltration
Deceptive file-sharing lure ('Acte_de_propriete.pdf') in French
Hosted on free Netlify subdomain with unknown creation date and no domain reputation
Domain age information unavailable

Details

Page Title

pCloud-Fichier sécurisé/

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'quiet-seahorse-393bb9.netlify.app' is registered, featuring subdomain 'quiet-seahorse-393bb9'. Its registrable label 'netlify' stretches across 7 characters with two vowels and 5 consonants. It segments into 3 words: net, li, fy. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

pCloud Transfer Vous avez reçu un fichier sécurisé Je | acte de_propriete.puf es Pour lire le document veuillez entrer les identifiants de messagerie auxquels ce fichier a été envoyé. | Entrez l'a...

Page Load Overview

1.04s
Total Load Time
86 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:366 chars
Detector Agreement:67%

Website Classification

Primary Category

real estate property88% confidence
Type: static
Method: ml+structural

All Detected Categories

real estate property
88%
documentation technical
45%
technology software
40%
cryptocurrency blockchain
34%
corporate business
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1063.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
035.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0141.101.90.98Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0185.15.59.240United States
AS14907Wikimedia Foundation Inc.
0188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.67.69.232Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0213.186.33.87Saran, Centre-Val de Loire, France
AS16276OVH SAS
0188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
079.127.216.204Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
0141.101.90.99Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1012--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BCF1B48B42E71CA63147A0A13BB6A7057662C1038D0ACC417F6D539DDF5ADA6A9F33CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:6dPVFe7rU/yGgF/mFZRL6EJ6lzkucv5fmHJ4i8iQi9n55h4i5milz:6dnFCrmucvICi8iQi9raikilz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7974:KAHCschJUAIABABBFAEyRxPkBXiskIMSISAAGPgQiSInIKBMRagmhDBExEGGoTEBjQ6hE0yD4HgEhGOQkWAQQAgAgymDYAog

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:b399cc6699cc2699
Difference Hash:0000080c0c4d0000
Wavelet Hash:3c2424242727273f
Color Hash:N/A

Other Hashes

Crop Resistant:0000080c0c4d0000

Scan History

Scan history not available

Unable to load historical scan data