Security Scan Report: 6492a5f23e5748270cde9028--fantastic-cranachan-859f3d.netlify.app

Site favicon
Submitted: Oct 8, 2026, 3:54:18 AMCompleted: Oct 8, 2026, 3:54:55 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Ephemeral Netlify subdomain hosting a copied Roundcube Webmail login that collects email + password. Classic webmail credential phishing; do not enter credentials.

Risk Factors (5)
Impersonation of the Roundcube Webmail login interface on a non-official domain
Credential-collecting login form (email + password) on an anonymous free hosting subdomain
Deploy-preview-style Netlify hostname indicating an ephemeral, unaccountable deployment
Domain unranked / no reputation
Page text ('Roundcube Webmail © 2026') and OCR garble are consistent with a copied webmail phishing template
Domain age information unavailable

Details

Page Title

Roundcube Webmail :: Welcome to Roundcube Webmail

Scan Type

public

Domain Name Analysis

The domain '6492a5f23e5748270cde9028--fantastic-cranachan-859f3d.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain '6492a5f23e5748270cde9028--fantastic-cranachan-859f3d'. Its registrable label 'netlify' stretches across 7 characters split between two vowels and 5 consonants. Segmentation suggests 3 words: net, li, fy. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://6492a5f23e5748270cde9028--fantastic-cranachan-859f3d.netlify.app/

Page Load Overview

0.76s
Total Load Time
87 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:119 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism32% confidence
Type: webapp
Method: ml+structural

All Detected Categories

news media journalism
32%
cryptocurrency blockchain
31%
technology software
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
463.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
035.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
0151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
45--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A2E341B05E43371DF627D1A063525EE5ED3BD243CA463FA99A5BBCB092D50D010AF2E2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:bBt2BQ27QbDu55UIaQnVWvCip50NyF07HwFDnupVFqwDS2InHnNA/KVJ+OZuzILx:bBcBZQm55UGipWK4HyDneJS2k+Bfn0Bj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:144655:w4SweIBGmoAYQRgQCrQBNBQUAAERIEgYWJIIAggUBGLgEARADfGYEwVBYEiHgAQgUCABpEyUGIIQYPQAiSAoMYAyABC4AUwY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7c3c3f7ffffffff
Perceptual Hash:b33366ccccccc931
Difference Hash:4c4d4d0c30000000
Wavelet Hash:c7c7c7e700000000
Color Hash:#e08b6c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data