Security Scan Report: dev-zpartners.webflow.io

Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 2 countries across 17 domains to perform 131 HTTP transactions. The main domain is webflow.io and was registered 13 years ago.

Submitted URL: https://dev-zpartners.webflow.io

AI Security Verdict

High Risk

Confidence: 58%

7
Risk Score

Single-source unverified phishing report on the primary domain drives the score up, but no forms, no malware, no obfuscated JS and no impersonation were found on this clean-looking Zoho-partner staging page.

Risk Factors (2)
Single-source, unverified phishing threat-intelligence match on the primary domain and URL (misp.scanmalware.com event 22157)
Staging 'dev-' subdomain on a shared publishing platform, so the page cannot independently establish its own history or ownership
Domain age information unavailable

Details

Page Title

Partner Zoho w Polsce | Cyfryzacja biznesu | Z Partners

Scan Type

public

Domain Name Analysis

Within the British Indian Ocean Territory country-code top-level domain (.io), 'dev-zpartners.webflow.io' is registered, featuring subdomain 'dev-zpartners'. The second-level label 'webflow' is 7 characters long holding 2 vowels versus 5 consonants. Word splitting yields two words: web, flow. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dev-zpartners.webflow.io

Page Load Overview

9.23s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl-PL
Text Length:19,937 chars
Detector Agreement:80%

Website Classification

Primary Category

cryptocurrency blockchain73% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
73%
education learning
69%
technology software
45%
corporate
35%
corporate business
29%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16172.64.151.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.18.160.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5146.75.122.132Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
518.64.181.11Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5142.251.20.97Google · CDNUnited States
AS15169Google LLC
5104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.20.29.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
5185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
13124--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CC641A3171B4216F0A4B86E4A2A5F72B21D365CED9C45084D5BC83782FD3E5ABCBD1A3

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:gynWHstNv0hvGvBqR/lf4zIsZN1G6GXNIa37jUSyHyryPytcSA6bhEK4As36i5mM:Uj6GBXj/CJdQ8F40

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:307030:ZGABBBk0UBExJGooTIMUcBgAMIgyWIOGpgUFrxBFgoEaBRIrQhGGCIQMHYRKCBSiBhOBBgl6zclEgEgSwKAkYiBQUbgGDaAo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00060e0c040607ff
Perceptual Hash:9216ed6dcb68ca94
Difference Hash:065c9c998d8c9673
Wavelet Hash:e70e0e0d0e0647ff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data