Security Scan Report: neon-genie-a8cda7.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://neon-genie-a8cda7.netlify.app

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake Google sign-in page on a free netlify.app subdomain that harvests email/password and carries a Telegram bot token for exfiltration; Google Safe Browsing flags social engineering. Do not enter credentials.

Risk Factors (5)
Impersonation of Google's brand and login UI on an unrelated free-hosting subdomain
Credential collection form with a password field
Google Safe Browsing Social Engineering detection
Telegram bot token embedded in inline script — exfiltration capability
Free hosting tenant with unknown creation date and no domain reputation
Domain age information unavailable

Details

Page Title

Google — Вход

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'neon-genie-a8cda7.netlify.app' is registered and includes subdomain 'neon-genie-a8cda7'. The core label 'netlify' covers 7 characters holding two vowels versus five consonants. Breaking it apart gives 3 words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://neon-genie-a8cda7.netlify.app

Page Load Overview

1.47s
Total Load Time
10 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:44 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network74% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
74%
technology software
71%
finance banking
58%
news media journalism
55%
cryptocurrency blockchain
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
363.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0142.251.157.119Google · CDNUnited States
AS15169Google LLC
035.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0142.251.156.119Google · CDNUnited States
AS15169Google LLC
0142.251.153.119Google · CDNUnited States
AS15169Google LLC
35--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AA91C66311B628612312F0543793A6483196D07BBC06D898BD7E062EEFEED5685F63CE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:2TGlBkDT0mGIK8Mu947KwgyMwEEaLpLolZEHG0m/exo1V1K+iISj:YDT0m/K8Mu94ezyME0EoHGVcoj1VQj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4281:DAAAFMAAaABAJ4ACAKDAABUAVASFQQAAAOCm0VAaBDCAAxQkYYGiBAEAAwAoCQAAcQBABAAEACggACCoAVAAgFYgJQAAAQED

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7e7ffff
Perceptual Hash:b3d9cc3233cc6433
Difference Hash:000008084d0c0000
Wavelet Hash:fcfce4e4e0e0c0c0
Color Hash:#79a4d2

Other Hashes

Crop Resistant:000008084d0c0000

Scan History

Scan history not available

Unable to load historical scan data