Security Scan Report: server-hopye-webpage-e8dn.bolt.host

Submitted: Completed: publiccompleted
This website contacted 14 IPs in 1 country across 8 domains to perform 12 HTTP transactions. The main domain is bolt.host and was registered 1 year 12 months ago.

Submitted URL: https://server-hopye-webpage-e8dn.bolt.host/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Phishing page posing as an 'example.com Secure Portal' mail login on a free bolt.host subdomain, harvesting email/password with a Telegram bot token wired in for exfiltration. Do not enter credentials.

Risk Factors (5)
Credential harvesting form (1 password field + email field) on a free bolt.host subdomain
Telegram bot token in page script enabling exfiltration of submitted data to an attacker-controlled chat
External IP-geolocation lookups used for victim fingerprinting
Brand claim of an official 'example.com' secure mail portal on a mismatched hostname
Fake OS/browser/time/location footer and error messaging used as a credential-retry lure
Domain age information unavailable

Details

Page Title

PORTAL - example.com Mail Authentication

Scan Type

public

Domain Name Analysis

Domain 'server-hopye-webpage-e8dn.bolt.host' uses the .host top-level domain and includes subdomain 'server-hopye-webpage-e8dn'. The core label 'bolt' covers 4 characters holding one vowel versus 3 consonants. Word splitting yields 1 word: bolt. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://server-hopye-webpage-e8dn.bolt.host/

Page Load Overview

3.08s
Total Load Time
508 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:403 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software74% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
74%
government public service
32%
documentation technical
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12172.67.75.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.26.13.118Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.67.73.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.26.8.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
052.6.129.0Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
0142.251.150.119Google · CDNUnited States
AS15169Google LLC
0142.251.13.147Google · CDNUnited States
AS15169Google LLC
0104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.26.7.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1214--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19133AE6605B30420B527D03C3BEF97086A7180079689DC6CB91D63949FC8D9266FFBF6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:52BfVO5osfN/WmsHUII3uiFiayfabi/QYNbKlwMz2yPRKXz4Z5dMX:8Bfc5osfxlsHlI3uupyybi5oNSPUI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:51325:aMKRALEgGQZQKqow8p2QJAAhsGQAgaKsQKAOEWLBwECIgFpU1MmokTQeoAK2DMLdNUmpRFDpRJqUJZBgQXAMqJdQyOCjJ2sl

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818181801
Perceptual Hash:89dd2277225d22dd
Difference Hash:4cb2b2b2b2b2b24f
Wavelet Hash:c8d8d8d8d8d8d8c1
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data