Security Scan Report: bucolic-faun-45e170.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 8 domains to perform 24 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://bucolic-faun-45e170.netlify.app/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Netlify-hosted page impersonating Indonesian wallet DANA, with a login.php form and a Google Safe Browsing Social Engineering hit — a phishing landing page. Do not enter any credentials.

Risk Factors (5)
Impersonation of the DANA financial brand on a non-official domain
Google Safe Browsing Social Engineering detection
Credential-lure form posting to login.php on shared Netlify hosting
Network IDS phishing-landing heuristics triggered against this host
Domain reputation unranked, subdomain creation date unknown (shared-host tenant)
Domain age information unavailable

Details

Page Title

DANA - Apa pun transaksinya selalu ada DANA

Scan Type

public

Domain Name Analysis

Domain 'bucolic-faun-45e170.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'bucolic-faun-45e170'. Count 7 characters in 'netlify' holding 2 vowels versus five consonants. Splitting it apart reveals three words: net, li, fy. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bucolic-faun-45e170.netlify.app/

Page Load Overview

3.10s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:42%
Script:Unknown
Direction:ltr

Detection Details

Text Length:266 chars
Detector Agreement:80%

Website Classification

Primary Category

finance banking93% confidence
Type: static
Method: ml+structural

All Detected Categories

finance banking
93%
government public service
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
2104.26.6.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.95Google · CDNUnited States
AS15169Google LLC
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.13.94Google · CDNUnited States
AS15169Google LLC
22.22.55.49Akamai · CDNOslo, Oslo, Norway
AS20940Akamai International B.V.
2104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2412--

Detected Technologies7

JQueryv3.5.1
100%
Bootstrapv3.3.5
100%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15792689194D21017601744CD3B97AB4A3A87A2074E2ACC647BDD4399EFCE6E49CEB3CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:EtBnLugG2BFTFmFmFfY9vqFQ9az0ClulNJNg9PFDYArNWmUs3R4ayG7Tgpyo33JU:EtRLugG2BFTFmFmF3FpX1I33q5TZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20468:EkKBSgMIRicIkFAQQXAA21sHT5AohB+tQWQAAgIJAAAbItQAkrAMfKgBACFRFmQZIArK0J4lWwKHIgEAGs8uUSCHAIOgQfZn

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3c3c3ffffe7ff
Perceptual Hash:e464a69a9b339993
Difference Hash:86868e8e00120d0c
Wavelet Hash:00800000030b0327
Color Hash:#862d46

Scan History

Scan history not available

Unable to load historical scan data