Security Scan Report: polite-tulumba-704e1b.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 14 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://polite-tulumba-704e1b.netlify.app/

AI Security Verdict

High Risk

Confidence: 84%

8
Risk Score

Netlify-hosted fake SAPO webmail login that collects email and password; brand impersonation on a domain unrelated to SAPO. Do not enter credentials.

Risk Factors (4)
Brand impersonation of SAPO (Portuguese ISP/webmail brand) on a non-official domain
Credential capture form (email + password) presented as a webmail sign-in
Unknown-age free netlify.app subdomain used as the phishing landing host
Network IDS alerts flagging Netlify-hosted phishing landings
Domain age information unavailable

Details

Page Title

Webmail Portal

Scan Type

public

Domain Name Analysis

You're looking at domain 'polite-tulumba-704e1b.netlify.app' on the application-focused generic top-level domain (.app), featuring subdomain 'polite-tulumba-704e1b'. The core label 'netlify' covers 7 characters containing two vowels alongside five consonants. Splitting it apart reveals three words: net, li, fy. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://polite-tulumba-704e1b.netlify.app/

Page Load Overview

2.60s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:81 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain65% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
65%
news media journalism
40%
government public service
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
763.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
735.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
142--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18CA20B217522DBABA82FB96C23F57FE5205B830BD311DBD4B9CD87900F82C761A53984

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:LGuTuFfv2XnTyBfX3Dk8WuEjHkvctKqg24L:LGuTuFf+Xn2pDk8Wu6HkvctK32o

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23308:gAAZo6QsLgACM8A8eAQkHFQEaEBEcByCSACwiIQMTIGwAJMJYwAACIpIgDGhoBAp8A74USGVCQAFMHRIWUwEDGLAuDAQSigo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f0018d8d89c8c8c
Perceptual Hash:d8ad32b6cd9a8cc8
Difference Hash:3368323230381919
Wavelet Hash:ff0018d8dcbccccc
Color Hash:#ac8053

Scan History

Scan history not available

Unable to load historical scan data