Security Scan: Webmail Sign-in

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/85d8e0d2-42c9-45a4-9892-9044771c14dc Domain and IP registration (RDAP)/api/v1/rdap/85d8e0d2-42c9-45a4-9892-9044771c14dc Certificate Transparency/api/v1/ct/dynamic-yeot-cfe7fa.netlify.app How often this domain was scanned/api/v1/domain/stats/dynamic-yeot-cfe7fa.netlify.app Scan history for this domain/api/v1/domain/history/dynamic-yeot-cfe7fa.netlify.app?limit=15

This website contacted 11 IPs in 2 countries across 8 domains to perform 12 HTTP transactions. The main domain is dynamic-yeot-cfe7fa.netlify.app and was registered 18 years ago.

Submitted URL: https://dynamic-yeot-cfe7fa.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake 'Webmail Sign-in' phishing page on a Netlify subdomain: spoofed captcha gate collects email/password and exfiltrates them to a Telegram bot. Do not enter credentials.

Risk Factors (5)

Email + password login form on a throwaway Netlify subdomain

Fake browser-verification captcha gate mimicking Cloudflare/reCAPTCHA

'Session expired' social-engineering lure

Credential/session data exfiltrated via Telegram bot API and victim IP harvested via api.ipify.org

Single-source phishing IoC match plus Netlify-hosting phishing IDS heuristics

Domain age information unavailable

Details

Page Title

Webmail Sign-in

Scan Type

public

Favicon Hash

MMH3: -1742728723

MD5: e0dc6025f3ad91101529eaab3879cf79

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'dynamic-yeot-cfe7fa.netlify.app' is registered with subdomain 'dynamic-yeot-cfe7fa'. The registrable portion 'netlify' spans 7 characters with 2 vowels and five consonants. It segments into 3 words: net, li, fy. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.32s

Total Load Time

131 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:248 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical58% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

58%

technology software

57%

news media journalism

35%

healthcare medical

34%

cryptocurrency blockchain

34%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.13.95Google · CDN	United States	AS15169Google LLC
1	142.251.155.119Google · CDN	United States	AS15169Google LLC
1	142.251.127.99Google · CDN	United States	AS15169Google LLC
1	142.251.110.94Google · CDN	United States	AS15169Google LLC
1	104.26.13.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.156.119Google · CDN	United States	AS15169Google LLC
1	142.251.110.106Google · CDN	United States	AS15169Google LLC
12	11	-	-