Security Scan Report: wh-t.netlify.app

Redirected to:
https://wh-t.netlify.app/join/index.html
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 4 domains to perform 13 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://wh-t.netlify.app/

Effective URL:
https://wh-t.netlify.app/join/index.html
Redirected

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Page displays WhatsApp branding on a non-WhatsApp netlify.app subdomain and asks for a WhatsApp-linked phone number to 'join a group' — brand impersonation/phone-number harvesting. No forms or malware detected.

Risk Factors (4)
Brand impersonation: WhatsApp (Meta) branding displayed on a non-Meta domain
Solicits a user's WhatsApp-linked phone number under the guise of group membership
Free shared-hosting subdomain with unknown actual age
Unranked domain with no reputation
Domain age information unavailable

Details

Page Title

WhatsApp

Scan Type

public

Domain Name Analysis

Domain 'wh-t.netlify.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'wh-t'. The registrable portion 'netlify' spans 7 characters with 2 vowels and 5 consonants. Word splitting yields 3 words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wh-t.netlify.app/

Page Load Overview

2.83s
Total Load Time
178 KB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:ar
Text Length:5,319 chars
Detector Agreement:50%

Website Classification

Primary Category

adult content30% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
363.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
2104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2185.15.59.240United States
AS14907Wikimedia Foundation Inc.
234.117.59.81Google · CDNKansas City, Missouri, United States
AS396982Google LLC
235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
136--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C4A38A23421935270537C2D930A95B77E2969E5FFAA70B412EDCD7F72BEACA0705B009

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:11axZ/DFTk0PhwfjTOIhIEBa4MuVi88NLUr1Dk8Wu6Hkv4tK324O:7wZRTk0PSGIhIEBa4Muo1N4rONR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:98097:CkQmBIcAI+BcE4oFKgTgjAWIgfBQ8wpGEACxigRMx5gHNJKYARBAYEALEQgAAEKAVQBkIAS1RUiNAAiKAUTAmCYECYQJxDoP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180001
Perceptual Hash:887722dd887788dd
Difference Hash:100c323232320c21
Wavelet Hash:3c3c181818180303
Color Hash:#6ccee0

Other Hashes

Crop Resistant:100c323232320c21

Scan History

Scan history not available

Unable to load historical scan data