Security Scan Report: mellifluous-alpaca-42e5c4.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 4 domains to perform 1569 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://mellifluous-alpaca-42e5c4.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake PUBG Mobile UC recharge page on a random Netlify subdomain asking for account email and password, with a Telegram bot token exfiltrating submitted data. Clear credential phishing and brand impersonation.

Risk Factors (5)
Impersonation of the PUBG brand on a non-official, randomly-named Netlify subdomain
Credential-harvesting form (email/username + password) solicited under the guise of in-game currency recharge
Telegram bot token embedded in page script — collected data can be exfiltrated to an attacker-controlled chat
Anti-analysis JavaScript (right-click blocked)
Unranked domain with no verifiable identity; shared-hosting tenant age is unknowable
Domain age information unavailable

Details

Page Title

PUBG Mobile - شحن UC

Scan Type

public

Domain Name Analysis

Domain 'mellifluous-alpaca-42e5c4.netlify.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'mellifluous-alpaca-42e5c4'. The registrable portion 'netlify' spans 7 characters with two vowels and 5 consonants. Word splitting yields three words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mellifluous-alpaca-42e5c4.netlify.app/

Page Load Overview

76.00s
Total Load Time
264 KB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:ar
Text Length:675 chars
Detector Agreement:50%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22535.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
224172.240.108.68United States
AS7979Servers.com, Inc.
22463.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
224172.240.127.242United States
AS7979Servers.com, Inc.
224172.240.108.84United States
AS7979Servers.com, Inc.
224172.240.127.243United States
AS7979Servers.com, Inc.
22423.111.84.4Netherlands
AS7979Servers.com, Inc.
15697--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BB92529B567350B67D1396A837FB174A3224A503C806CD297FCC6344CFCA3E99A92B5C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:5CYqNfiy0PUSvJbAu1qvKIqaj+hct34DTGrv+jgcFk1OjjtHrFZBYXQr6LEuLpq5:yq3pLFdFUUFr1vtn7Dnv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19611:xoOBQYklkBmFpgY0UQDDkiiYJCAcaCiAEQq3QbgcgACPAMIqhBjMEDiMIWAcIzDrChA6JADEqAgEI4cSSiQTax0MIItAgjcR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818180000
Perceptual Hash:993366cc643399d9
Difference Hash:043a3a32b2321004
Wavelet Hash:083c3c3c3c3c1800
Color Hash:#d2a979

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data