Security Scan Report: legendary-narwhal-00f0c4.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 3 countries across 8 domains to perform 10 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://legendary-narwhal-00f0c4.netlify.app/?utm_source=sniply&utm_campaign=sniply&utm_medium=sniply

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Credential phishing impersonating pCloud on a free Netlify subdomain; a fake 'secure document' lure leads to an email/password form whose data can be sent to an attacker's Telegram bot. Do not enter credentials.

Risk Factors (5)
Brand impersonation of pCloud on a non-official domain
Credential-harvesting form (email + password) with a lure document
Telegram bot token in inline script indicating credential exfiltration channel
Free shared-hosting subdomain with unknown creation date and no reputation
Deceptive pretext falsely claiming a private property deed was shared with the visitor
Domain age information unavailable

Details

Page Title

pCloud-Fichier sécurisé/

Scan Type

public

Domain Name Analysis

Domain 'legendary-narwhal-00f0c4.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'legendary-narwhal-00f0c4'. The second-level label 'netlify' is 7 characters long containing 2 vowels alongside five consonants. Splitting it apart reveals three words: net, li, fy. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

pCloud Transfer Vous avez reçu un fichier sécurisé Je | acte de_propriete.puf es Pour lire le document veuillez entrer les identifiants de messagerie auxquels ce fichier a été envoyé. | Entrez l'a...

Page Load Overview

1.39s
Total Load Time
86 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:366 chars
Detector Agreement:67%

Website Classification

Primary Category

real estate property88% confidence
Type: static
Method: ml+structural

All Detected Categories

real estate property
88%
documentation technical
45%
technology software
40%
cryptocurrency blockchain
34%
corporate business
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1063.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0141.101.90.97Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0185.15.59.240United States
AS14907Wikimedia Foundation Inc.
0188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.26.2.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0213.186.33.87Saran, Centre-Val de Loire, France
AS16276OVH SAS
0188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0212.102.56.179Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
0141.101.90.99Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.26.3.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1011--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T176F1B38B42F71CA63147A0A13BB6A7057662C1038D0ACC417F6D539DDF4AD96A9F73C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:mfdPVFe7rU/yGgF/mFZRL6EJ6lzkucv35mHJ4i8iQi9n55h4i5milz:mfdnFCrmucv30Ci8iQi9raikilz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7974:KAHCschJUAIABABBFAkyRxPkBXisEAMSIWAAGPgQiSInIKBMRagmhDBExEOGoTEBjQ6hE0yHYHgEhGOQkWAQQAgAgymDYAog

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:b399cc6699cc2699
Difference Hash:0000080c0c4d0000
Wavelet Hash:3c2424242727273f
Color Hash:N/A

Other Hashes

Crop Resistant:0000080c0c4d0000

Scan History

Scan history not available

Unable to load historical scan data