Security Scan: Iframe Redirection Setup

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ccb337e7-9230-432a-8953-e2e56019ed3e Domain and IP registration (RDAP)/api/v1/rdap/ccb337e7-9230-432a-8953-e2e56019ed3eHow often this domain was scanned/api/v1/domain/stats/bt-tiarenetb.bolt.host Scan history for this domain/api/v1/domain/history/bt-tiarenetb.bolt.host?limit=15

This website contacted 5 IPs in 2 countries across 3 domains to perform 7 HTTP transactions. The main domain is bolt.host and was registered 1 year 12 months ago.

Submitted URL: https://bt-tiarenetb.bolt.host/

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

Bank-branded login screen framed on a Bolt.new subdomain with a Telegram bot token exfiltration script — brand impersonation plus credential theft infrastructure.

Risk Factors (5)

Bank-branded credential entry screen hosted on an unrelated platform subdomain (brand impersonation)

Telegram-bot-token exfiltration script loaded from an external domain

Obfuscated iframe/redirection wrapper hiding the real login surface from the hosting page

Subdomain naming mimics a bank ('bt-tiarenetb' / Banque de Tabiti)

No legitimate business identity, legal pages or contact information on the page

Domain age information unavailable

Details

Page Title

Iframe Redirection Setup

Scan Type

public

Favicon Hash

MMH3: -1728280692

MD5: 5c9176e62981da81119ef19a0ad4aa24

Domain Name Analysis

You're looking at domain 'bt-tiarenetb.bolt.host' on the .host top-level domain, featuring subdomain 'bt-tiarenetb'. The second-level label 'bolt' is 4 characters long containing one vowel alongside three consonants. Splitting it apart reveals 1 word: bolt. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.32s

Total Load Time

251 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:100 chars

Detector Agreement:50%

Website Classification

Primary Category

finance banking90% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking

90%

adult content

63%

technology software

60%

healthcare medical

60%

cryptocurrency blockchain

50%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	104.26.13.118Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.12.118Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.7.237Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	85.13.130.218	Germany	AS34788Neue Medien Muennich GmbH
1	172.67.75.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	5	-	-