Security Scan Report: subtle-belekoy-f2a734.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 8 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://subtle-belekoy-f2a734.netlify.app

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Phishing landing on a netlify.app subdomain imitating Google sign-in, harvesting email/phone, password and a 6-digit 2FA code, with a Telegram bot token embedded for exfiltration.

Risk Factors (5)
Brand impersonation: Google login UI on a non-Google netlify.app subdomain
Credential harvesting form with password and phone/email inputs
Telegram bot token in page script enabling exfiltration of submitted data
Multi-stage collection of a 6-digit verification code (2FA interception pattern)
Hosted on a free instant-publish platform subdomain with unknown creation date
Domain age information unavailable

Details

Page Title

Вход

Scan Type

public

Domain Name Analysis

Domain 'subtle-belekoy-f2a734.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'subtle-belekoy-f2a734'. The second-level label 'netlify' is 7 characters long holding 2 vowels versus five consonants. Segmentation suggests 3 words: net, li, fy. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Google Bxog Ucnonbayiire email unu tenedou Wart we 4 Email un tenepox

Page Load Overview

0.39s
Total Load Time
132 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:145 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network78% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
78%
adult content
70%
technology software
68%
healthcare medical
58%
finance banking
56%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
463.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
174.125.29.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1172.217.208.95Google · CDNUnited States
AS15169Google LLC
85--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C9D2099369F30162680BB57D2BEBA3C93037822BE602CB847D9C53948F91D9516777DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:a/23OrKtocyc69jvc3Dk8WuEjHkvAWqg24f:S23MCo7EDk8Wu6HkvAW32M

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:29943:tEAh6BAcACAgACIkKNTJUAxOOhrUAILQEoArAoAmhEEiAzABgoQhihaAJBkMT3gFpsdIAGAIAGiTVlAhCABAQCAkQFC4kKAM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7f7f7fffe
Perceptual Hash:d5aa55aa55aa54aa
Difference Hash:0000080804040000
Wavelet Hash:0c0c0404e4e4fffe
Color Hash:N/A

Other Hashes

Crop Resistant:0000080804040000

Scan History

Scan history not available

Unable to load historical scan data