Security Report: server-protection-we-jelj.bolt.host - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4ecd75ec-91a3-4a68-ac73-ac50984ed151 Domain and IP registration (RDAP)/api/v1/rdap/4ecd75ec-91a3-4a68-ac73-ac50984ed151How often this domain was scanned/api/v1/domain/stats/server-protection-we-jelj.bolt.host Scan history for this domain/api/v1/domain/history/server-protection-we-jelj.bolt.host?limit=15

This website contacted 15 IPs in 1 country across 8 domains to perform 12 HTTP transactions. The main domain is bolt.host and was registered 1 year 12 months ago.

Submitted URL: https://server-protection-we-jelj.bolt.host/#[email protected]

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Phishing page on a bolt.host subdomain posing as a mail authentication portal: it harvests the victim's password and exfiltrates it via a Telegram bot token embedded in the page script.

Risk Factors (6)

Password collection form disguised as a mail authentication prompt

Telegram bot token in page script enables direct credential exfiltration

Victim's email address injected into the URL fragment as a lure/tracking token

Brand mismatch: hex-string domain branding on an unrelated bolt.host subdomain

Fake browser error overlay and IP-geolocation beacons used to appear legitimate and profile visitors

External IP lookup domain flagged by a HIGH-severity IDS signature

Domain age information unavailable

Details

Page Title

PORTAL - 75a062977c148c67270c291f104e4359eb5a.com Mail Authentication

Scan Type

public

Domain Name Analysis

The domain 'server-protection-we-jelj.bolt.host' uses the .host top-level domain and includes subdomain 'server-protection-we-jelj'. The registrable portion 'bolt' spans 4 characters holding one vowel versus 3 consonants. Segmentation suggests one word: bolt. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.34s

Total Load Time

394 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:579 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software65% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

65%

government public service

42%

documentation technical

33%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	104.26.12.118Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.26.13.118Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.26.7.237Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	34.232.78.185Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
0	142.251.152.119Google · CDN	United States	AS15169Google LLC
0	192.178.183.104Google · CDN	United States	AS15169Google LLC
0	172.67.75.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.26.6.237Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	15	-	-