Security Scan Report: shimmering-peony-afbdc6.netlify.app

Bot Protection Detected

This website is protected by perimeterx bot protection. Our scanner was challenged or blocked during access.

Submitted: Jul 8, 2026, 1:50:09 PMCompleted: Jul 8, 2026, 1:51:20 PMpubliccompleted

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 4 HTTP transactions. The main domain is shimmering-peony-afbdc6.netlify.app and was registered 8 years ago.

Submitted URL: https://shimmering-peony-afbdc6.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

The site impersonates Aruba Mail, collects credentials, and triggers critical IDS alerts – treat as a confirmed phishing scam.

Risk Factors
Credential harvesting form
Brand impersonation of a well‑known service
Unknown subdomain age on a free hosting platform
Critical and high severity network IDS alerts
Domain age information unavailable

Details

Page Title

Sign in to Webmail - Aruba Mail

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(26%)

Domain Information

Domain 'shimmering-peony-afbdc6.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'shimmering-peony-afbdc6'. The core label 'netlify' covers 7 characters holding two vowels versus 5 consonants. Splitting it apart reveals three words: net, li, fy. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of shimmering-peony-afbdc6.netlify.app

Page Load Overview

0.79s
Total Load Time
4
HTTP Requests
1
Domains
873 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:798 chars
Detector Agreement:67%

Website Classification

Primary Category

government public service26% confidence
Type: webapp
Method: ml+structural

All Detected Categories

government public service
26%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
263.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
42--

Page Statistics

4
Requests
1
Unique Domains
872.0 KB
Total Size

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14E8412B1276368350963A9BAD9523F1DAC80EBF7C167C68EF1D3A0D51ACCF019F11668

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:rDdsi+rK6MeRi4oU68qRQD7ZO9ApqDdsi+rK6MeRi4oU68qRQD7ZO9Appp:v6rKbeB68qiZfM6rKbeB68qiZf9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:376215:zgySBIAKSWgHgVAKxCBBUgOBIJkEBBIiCAiIPIqWUBiZhFE6sJBFUJRiFkViE2aweiCHTKUuCJwxJA0CFhKQiQWBFghlAiSM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8f8f8b8bffffff
Perceptual Hash:b939c6c62dc2c23d
Difference Hash:ed3a381616b94410
Wavelet Hash:e18383830121ffff
Color Hash:#d46ce0

Scan History

Scan history not available

Unable to load historical scan data