ScanMalware.com

Security Scan Report: precious-toffee-f8e4bf.netlify.app

Site favicon
Submitted: Dec 4, 2025, 10:52:33 AMCompleted: Dec 4, 2025, 10:53:23 AMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is precious-toffee-f8e4bf.netlify.app.

Submitted URL: https://precious-toffee-f8e4bf.netlify.app/security.oauth.roundcube.webmail.client.redirect_uri.strict.match.mail

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Phishing site impersonating Roundcube Webmail; confirmed scam.

Risk Factors
Brand impersonation on an unranked, likely new domain
Credential harvesting login form
New/unknown domain age (<90 days) mimicking a known service
Use of a generic hosting platform (netlify.app) for a branded login page
Absence of legitimate redirects to the official Roundcube domain
Domain age information unavailable

Details

Page Title

Roundcube Webmail :: Welcome to Roundcube Webmail

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

news media journalism

(55%)

Domain Information

Domain 'precious-toffee-f8e4bf.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'precious-toffee-f8e4bf'. Count 7 characters in 'netlify' containing two vowels alongside 5 consonants. Breaking it apart gives three words: net, li, fy. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://precious-toffee-f8e4bf.netlify.app/security.oauth.roundcube.webmail.client.redirect_uri.strict.match.mail

Page Load Overview

0.31s
Total Load Time
6
HTTP Requests
3
Domains
220 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:73 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism55% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
55%
cryptocurrency blockchain
44%
technology software
33%
government public service
29%
healthcare medical
29%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.17.25.14United States
AS13335CLOUDFLARENET
2172.67.139.137United States
AS13335CLOUDFLARENET
135.157.26.135Frankfurt am Main, Hesse, Germany
AS16509AMAZON-02
0104.17.24.14United States
AS13335CLOUDFLARENET
063.176.8.218Frankfurt am Main, Hesse, Germany
AS16509AMAZON-02
02a05:d014:58f:6200::258Frankfurt am Main, Hesse, Germany
AS16509AMAZON-02
0104.21.89.92United States
AS13335CLOUDFLARENET
02606:4700:3031::6815:595cUnited States
AS13335CLOUDFLARENET
02606:4700:3037::ac43:8b89United States
AS13335CLOUDFLARENET
02606:4700::6811:180eUnited States
AS13335CLOUDFLARENET
612--

Detected Technologies2

Netlify
40%
HSTS
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T151428345A3C5285437138FB7311BB2C9E98F489B7918890AF21CB8F46F99646C5E3F74

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:NrjJWMFBrMo0OGgvQ2DC4fOqKB4fULxhTHZbjoWD5tatv/1161o:5jFFBrMo0OGgvQ2DC4fOqBfeLTHZbjo5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12732:MqQxQIhkIBCBVEIxAGyCwkhA6VAiAlhTkLWSADoaQYg1koISQNOQp4KbBE0GJAQ5COAA4mwgR2RIAcBQWUkkpggA5ghSBISV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7cfdfc3c3ff
Perceptual Hash:b383ce3c98666393
Difference Hash:000c4c1e10960e00
Wavelet Hash:3f27270303030307
Color Hash:#361f93

Other Hashes

Crop Resistant:000c4c1e10960e00

Scan History

Scan history not available

Unable to load historical scan data