Security Scan Report: joyful-naiad-c29615.netlify.app

Submitted: Completed: publiccompleted
This website contacted 18 IPs in 2 countries across 10 domains to perform 26 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://joyful-naiad-c29615.netlify.app/careers.html

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Fake Meta 'account restriction review' form on a netlify.app subdomain harvesting contact and Facebook page details, with a Telegram bot exfiltration channel and anti-DevTools evasion — a brand-impersonation phishing page.

Risk Factors (5)
Brand impersonation of Meta/Facebook on a non-official, unranked netlify.app subdomain
Data-harvesting appeal form collecting personal email, business email, phone and Facebook page name
Telegram bot token embedded in page script enabling exfiltration of submitted data
Anti-DevTools script (disable-devtool) obstructing inspection of the phishing page
Free instant-hosting subdomain with unknown creation date used for a brand-authenticated support flow
Domain age information unavailable

Details

Page Title

Meta | Request Review

Scan Type

public

Domain Name Analysis

You're looking at domain 'joyful-naiad-c29615.netlify.app' on the application-focused generic top-level domain (.app), featuring subdomain 'joyful-naiad-c29615'. The core label 'netlify' covers 7 characters containing two vowels alongside 5 consonants. Tokenizing the label suggests three words: net, li, fy. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://joyful-naiad-c29615.netlify.app/careers.html

Page Load Overview

6.45s
Total Load Time
481 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:927 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network35% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
35%
documentation technical
35%
technology software
32%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
935.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.250.154.102Google · CDNUnited States
AS15169Google LLC
1142.251.154.120Google · CDNUnited States
AS15169Google LLC
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
134.117.59.81Google · CDNKansas City, Missouri, United States
AS396982Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1142.251.153.119Google · CDNUnited States
AS15169Google LLC
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
2618--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E1F2282266B1017B6CABD0E9B6F1BBD934A38387E312DBD4FADD02515FC2D931993604

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:1OFhnJ4M+WbQtYZTgTUT7oDk8Wu6HkvoW32Vy:WhJ4xYZL7BNJy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36654:zQgBMCMUB4IBAkojwYI1aQAIXTlgRGjUQCJi0BliQoAwgI+AtCQpAYhZAaSpl2yBHAgFCAoEwIIQiGBEqA9AA46UToABaNJA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7ffefefefe7c2
Perceptual Hash:f18a758a55aa5d2a
Difference Hash:4c0c101c1c180c0c
Wavelet Hash:00c3c7c7c7c7c7c2
Color Hash:#2d43d2

Other Hashes

Crop Resistant:4c0c101c1c180c0c

Scan History

Scan history not available

Unable to load historical scan data