Security Scan: Webmail Settings

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/85512c3e-2e43-48d0-b58e-a10abfcaf582 Domain and IP registration (RDAP)/api/v1/rdap/85512c3e-2e43-48d0-b58e-a10abfcaf582How often this domain was scanned/api/v1/domain/stats/hopeful-pare-3a8880.netlify.app Scan history for this domain/api/v1/domain/history/hopeful-pare-3a8880.netlify.app?limit=15

This website contacted 11 IPs in 2 countries across 8 domains to perform 11 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://hopeful-pare-3a8880.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

Fake 'Webmail Settings' login page on an anonymous Netlify subdomain that sends entered email and password to an unrelated .xyz host. Reported as phishing. Do not enter credentials.

Risk Factors (5)

Password field harvested with no identifiable legitimate service owner

Cross-origin POST of form data to an unrelated third-party domain (goodtidingslos.xyz)

Free hosting-platform subdomain with unknown creation date and no domain reputation (unranked in Cisco Umbrella)

Reported as phishing in threat intelligence on the primary domain

Fabricated reassurance text ('This is a secure page') on a page collecting credentials

Domain age information unavailable

Details

Page Title

Webmail Settings

Scan Type

public

Favicon Hash

MMH3: -1742728723

MD5: e0dc6025f3ad91101529eaab3879cf79

Domain Name Analysis

Domain 'hopeful-pare-3a8880.netlify.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'hopeful-pare-3a8880'. Its registrable label 'netlify' stretches across 7 characters containing 2 vowels alongside 5 consonants. Breaking it apart gives three words: net, li, fy. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Email Contact Setting Account Settings Log in to continue Email Address Top tips to improve your Password safety online show | Learn more Remember me This is a secure page

Page Load Overview

1.12s

Total Load Time

208 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:199 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking42% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking

42%

documentation technical

40%

news media journalism

40%

government public service

31%

healthcare medical

29%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	142.251.20.95Google · CDN	United States	AS15169Google LLC
1	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.110.95Google · CDN	United States	AS15169Google LLC
1	172.64.147.188Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
11	11	-	-