Security Scan: Webmail Portal

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3ac7c7cc-69ee-4ade-950c-15f2f20eafd1 Domain and IP registration (RDAP)/api/v1/rdap/3ac7c7cc-69ee-4ade-950c-15f2f20eafd1How often this domain was scanned/api/v1/domain/stats/polite-tulumba-704e1b.netlify.app Scan history for this domain/api/v1/domain/history/polite-tulumba-704e1b.netlify.app?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 14 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://polite-tulumba-704e1b.netlify.app/

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Fake 'Webmail Portal' on a random Netlify subdomain imitates SAPO's login and collects email + password. Classic credential phishing — do not enter credentials.

Risk Factors (5)

Credential collection (email + password) for a third-party webmail service on a non-official domain

Brand impersonation of SAPO on a mismatched netlify.app subdomain

Obfuscated/random-looking hostname unrelated to the claimed service

Hosted on a free shared platform namespace with no attributable domain age

Suricata 'Possible Phishing Landing' heuristics tied to this Netlify host

Domain age information unavailable

Details

Page Title

Webmail Portal

Scan Type

public

Favicon Hash

MMH3: -674317510

MD5: 2d9ce584f626eb56c9813d6f54583209

Domain Name Analysis

You're looking at domain 'polite-tulumba-704e1b.netlify.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'polite-tulumba-704e1b'. The registrable portion 'netlify' spans 7 characters holding two vowels versus five consonants. Splitting it apart reveals three words: net, li, fy. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

17.15s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:81 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain65% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

65%

news media journalism

40%

government public service

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
7	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
14	2	-	-