Security Scan Report: orange-pl.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 4 countries across 6 domains to perform 45 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://orange-pl.netlify.app/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Unlicensed IPTV site posing as Orange's 'OrangeTV Go' on a free Netlify subdomain, with fabricated testimonials and a Telegram bot exfiltration channel; no forms on page, but brand impersonation and piracy make it high-risk.

Risk Factors (6)
Impersonation of a different entity's brand (Orange) on a non-official netlify.app subdomain
Sale of unlicensed IPTV / premium channel access, a piracy operation
Telegram bot token embedded in page script (covert data-send channel)
Fabricated user counts and reviews designed to manufacture trust
21 cross-domain redirects
Unranked domain of unknown age on shared hosting platform
Domain age information unavailable

Details

Page Title

OrangeTV Go: mobilna telewizja online z aplikacją

Scan Type

public

Domain Name Analysis

The domain 'orange-pl.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'orange-pl'. Its registrable label 'netlify' stretches across 7 characters with 2 vowels and 5 consonants. Splitting it apart reveals three words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://orange-pl.netlify.app/

Page Load Overview

1.13s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:47%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9,521 chars
Detector Agreement:75%
Language mismatch: Declared as en but detected as pl

Website Classification

Primary Category

entertainment media78% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
78%
healthcare medical
42%
technology software
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
963.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
635.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
6104.20.44.133Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
680.48.169.1Poznan, Greater Poland, Poland
AS5617Orange Polska Spolka Akcyjna
6146.75.122.208Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
6185.15.59.240United States
AS14907Wikimedia Foundation Inc.
6194.152.33.40Latvia
AS12993Sabiedriba ar ierobezotu atbildibu DELSKA Latvia
457--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T139A395342348293D61178BE4F351BB7851ADD384EA1F9068F6BC1276578BCC6E9236E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:WCWWWshKKKKqKKKKwKKKKoSEb9bDb1GAPeBwnzocNgLn9CFPbJJ:JCKwnkcNgSbL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:101586:SgkhMwCAAhBQYWiEiPA4ZEgQQgM0Ko6uHCdAjRgJQwRQ2YuXAgCRoHAkYFFlSE1BEECQggiSCRQDQHSEGA0gOMLAbjGho0wQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c100607666207703
Perceptual Hash:827b2d98b2c6696b
Difference Hash:97c9c3ccdcc9c4c7
Wavelet Hash:f7007076662d7723
Color Hash:#2dd280

Scan History

Scan history not available

Unable to load historical scan data