Security Scan: Document Access Portal

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8b6c53e3-56a6-45b6-97f1-de5bcc69b9d9 Domain and IP registration (RDAP)/api/v1/rdap/8b6c53e3-56a6-45b6-97f1-de5bcc69b9d9How often this domain was scanned/api/v1/domain/stats/previewlogicredentiallesnzp1v56uxy8rdx5ypatb0ockcb9tr6a0df13572.bolt.host Scan history for this domain/api/v1/domain/history/previewlogicredentiallesnzp1v56uxy8rdx5ypatb0ockcb9tr6a0df13572.bolt.host?limit=15

This website contacted 5 IPs in 1 country across 3 domains to perform 5 HTTP transactions. The main domain is bolt.host and was registered 1 year 12 months ago.

Submitted URL: https://previewlogicredentiallesnzp1v56uxy8rdx5ypatb0ockcb9tr6a0df13572.bolt.host/

AI Security Verdict

Moderate Risk

Confidence: 60%

Risk Score

Unbranded 'Document Access' page on a bolt.host preview subdomain that gates a document never shown behind an email-harvesting form with fake verification and security claims. No password or payment capture, no threat-intel or malware hits, so MODERATE_RISK.

Risk Factors (4)

Email-address harvesting form gated behind a nonexistent 'document' that is never delivered

Deceptive identity-verification framing and fake security/trust indicators

Generic unbranded page on a random subdomain of a developer hosting platform

Classic phishing-lure structure (collect email, then deliver a follow-up lure)

Safety Factors (5)

No password, disguised-password or payment fields on the page

No Indicators of Compromise or threat-intelligence matches

No JavaScript malware patterns or obfuscated/exfiltrating scripts

No network-level IDS alerts; no cross-origin credential exfiltration

Terms and privacy links present; page runs on a mainstream hosting platform

Domain age information unavailable

Details

Page Title

Document Access Portal

Scan Type

public

Favicon Hash

MMH3: -797270204

MD5: 8811f5358af09956bbef3643795ddf10

Domain Name Analysis

Within the .host top-level domain, 'previewlogicredentiallesnzp1v56uxy8rdx5ypatb0ockcb9tr6a0df13572.bolt.host' is registered; it also runs on subdomain 'previewlogicredentiallesnzp1v56uxy8rdx5ypatb0ockcb9tr6a0df13572'. The registrable portion 'bolt' spans 4 characters holding one vowel versus three consonants. Splitting it apart reveals 1 word: bolt. No strong language cues emerged from the frequency lists.

Screenshot

Document Access feification @ Secured Conn Verify Your Identity Enter your email address to access the document Email Address name@company.com = Verify & Access Document {© This document is pr...

Page Load Overview

2.22s

Total Load Time

201 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:736 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business41% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business

41%

government public service

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	104.26.13.118Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.75.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.6.237Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.73.66Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	5	-	-