Security Scan: Webmail Sign-in

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/aa847c45-2693-48a4-92f1-8d6b67a04424 Domain and IP registration (RDAP)/api/v1/rdap/aa847c45-2693-48a4-92f1-8d6b67a04424How often this domain was scanned/api/v1/domain/stats/dynamic-yeot-cfe7fa.netlify.app Scan history for this domain/api/v1/domain/history/dynamic-yeot-cfe7fa.netlify.app?limit=15

This website contacted 12 IPs in 2 countries across 7 domains to perform 12 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://dynamic-yeot-cfe7fa.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed phishing page: a fake 'checking your browser' gate fronts an email/password webmail form whose script exfiltrates input to a Telegram bot; Safe Browsing and threat intel both flag it. Never enter credentials.

Risk Factors (7)

Credential-harvesting login form (email + password) behind a fake browser-verification gate

Telegram bot token embedded in page script for exfiltrating submitted data

Cross-origin POST to api.telegram.org and api.ipify.org

Google Safe Browsing Social Engineering detection

Single-source threat-intel phishing report on the primary domain

Throwaway Netlify subdomain with no reputation and unknown age

Lure text 'Previous session has expired, login to continue' creating false urgency

Domain age information unavailable

Details

Page Title

Webmail Sign-in

Scan Type

public

Favicon Hash

MMH3: -1742728723

MD5: e0dc6025f3ad91101529eaab3879cf79

Domain Name Analysis

Domain 'dynamic-yeot-cfe7fa.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'dynamic-yeot-cfe7fa'. Count 7 characters in 'netlify' split between 2 vowels and 5 consonants. Word splitting yields 3 words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Checking your browser before accessing the site lam not a robot click on the checkbox to verify if you're human.

Page Load Overview

1.42s

Total Load Time

131 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:248 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical59% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

59%

technology software

55%

news media journalism

43%

healthcare medical

40%

adult content

34%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.250.154.95Google · CDN	United States	AS15169Google LLC
1	142.251.157.119Google · CDN	United States	AS15169Google LLC
1	142.251.14.147Google · CDN	United States	AS15169Google LLC
1	142.251.110.94Google · CDN	United States	AS15169Google LLC
1	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.151.119Google · CDN	United States	AS15169Google LLC
12	12	-	-