Security Scan Report: 2025-zimbra.weebly.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 6 domains to perform 29 HTTP transactions. The main domain is weebly.com and was registered 20 years ago.

Submitted URL: https://2025-zimbra.weebly.com/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Phishing landing page on a free Weebly subdomain impersonating Zimbra webmail: it collects email and password (label obfuscated as 'Pàssword') behind a VERIFY button, and triggers two HIGH IDS phishing alerts.

Risk Factors (5)
IDS phishing landing alerts (2 x HIGH) on the scanned URL
Credential-harvesting form collecting email and password behind a 'VERIFY' action
Unicode-obfuscated password field label ('Pàssword') suggesting deliberate evasion
Impersonation of Zimbra webmail on a non-Zimbra, free shared-hosting subdomain
Page creation date unknown — Weebly subdomain sits behind a 19-year-old platform apex, so platform age says nothing about this content
Domain age information unavailable

Details

Page Title

Home

Scan Type

public

Domain Name Analysis

The domain '2025-zimbra.weebly.com' uses the commercial generic top-level domain (.com) with subdomain '2025-zimbra'. The registrable portion 'weebly' spans 6 characters holding two vowels versus 4 consonants. Word splitting yields two words: wee, bly. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://2025-zimbra.weebly.com/

Page Load Overview

1.55s
Total Load Time
941 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:57 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism43% confidence
Type: spa
Method: ml+structural

All Detected Categories

news media journalism
43%
real estate property
43%
healthcare medical
35%
government public service
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
874.115.51.8United States
AS27647Weebly, Inc.
374.115.51.9United States
AS27647Weebly, Inc.
3146.75.121.46Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
3142.251.152.119Google · CDNUnited States
AS15169Google LLC
3142.251.150.120Google · CDNUnited States
AS15169Google LLC
332.188.197.229Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
3142.251.153.119Google · CDNUnited States
AS15169Google LLC
3142.251.13.94Google · CDNUnited States
AS15169Google LLC
298--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T113D218DCF77DAF34473640A6A7AA71DFF43DE626ED41DC88EAEC412222C6E40526058D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:eIRIOITIwIgIiKZgNDfIwIGI5IVJ7SQIRIOITIwIgIiKZgNDfIwIGI5IVJ7Sr7PH:eIRIOITIwIgIiKZgNDfIwIGI5IVJ7SQ0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30286:SDUAQAQgIAmk9AgCKkAkI1ApgGPBSYGwskQRO4AgRAa9FCZASNp4ZFvL4rGQAChgBAQBGDySIHEKEIwogEgSWClzhBCQSUJg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7ffff000000
Perceptual Hash:f7f626cc89998891
Difference Hash:004c0c1008220202
Wavelet Hash:ffe7e6eefe000000
Color Hash:#8a1f93

Other Hashes

Crop Resistant:004c0c1008220202

Scan History

Scan history not available

Unable to load historical scan data