Security Report: security-server-stat-3f7g.bolt.host - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4b3aedd6-aae8-4637-8fcf-9fe2291be981 Domain and IP registration (RDAP)/api/v1/rdap/4b3aedd6-aae8-4637-8fcf-9fe2291be981How often this domain was scanned/api/v1/domain/stats/security-server-stat-3f7g.bolt.host Scan history for this domain/api/v1/domain/history/security-server-stat-3f7g.bolt.host?limit=15

This website contacted 11 IPs in 1 country across 8 domains to perform 12 HTTP transactions. The main domain is bolt.host and was registered 1 year 12 months ago.

Submitted URL: https://security-server-stat-3f7g.bolt.host/#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake mail-authentication portal on a bolt.host subdomain that targets a specific email address and harvests its password, with a Telegram bot token exfiltrating stolen data. Confirmed credential phishing.

Risk Factors (6)

Credential-harvesting password form impersonating a mail authentication portal for a different domain

Telegram bot token in page script enabling direct credential exfiltration

Victim-specific lure: target email address hardcoded in URL fragment and page body

Fabricated browser error / device fingerprinting overlay used as social engineering

External IP-lookup and media-proxy calls (ipapi.co, api.ipify.org, image.thum.io) for victim profiling

Brand mismatch: displays and claims to be the mail portal of e9addf3ed944b76e30f63c62b9d7cc51598a.org while hosted on security-server-stat-3f7g.bolt.host

Domain age information unavailable

Details

Page Title

PORTAL - e9addf3ed944b76e30f63c62b9d7cc51598a.org Mail Authentication

Scan Type

public

Domain Name Analysis

The domain 'security-server-stat-3f7g.bolt.host' uses the .host top-level domain, featuring subdomain 'security-server-stat-3f7g'. The core label 'bolt' covers 4 characters containing 1 vowel alongside three consonants. Splitting it apart reveals 1 word: bolt. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.23s

Total Load Time

394 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:581 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software69% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

69%

government public service

43%

documentation technical

35%

news media journalism

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.26.12.118Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.7.237Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	52.55.196.165Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
1	142.251.156.119Google · CDN	United States	AS15169Google LLC
1	142.251.20.99Google · CDN	United States	AS15169Google LLC
1	172.67.75.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.150.119Google · CDN	United States	AS15169Google LLC
12	11	-	-