Security Report: mail-mof-gov-np.netlify.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dad7baff-e362-4f62-aa0d-b428ae4408c2 Domain and IP registration (RDAP)/api/v1/rdap/dad7baff-e362-4f62-aa0d-b428ae4408c2How often this domain was scanned/api/v1/domain/stats/mail-mof-gov-np.netlify.app Scan history for this domain/api/v1/domain/history/mail-mof-gov-np.netlify.app?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 6 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://mail-mof-gov-np.netlify.app/

Effective URL:

https://mail-mof-gov-np.netlify.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Confirmed credential-phishing page on a netlify.app subdomain impersonating a government "MoFA Email Server"/Yahoo login, exfiltrating email+password to a malware-flagged 000webhostapp.com endpoint.

Risk Factors (6)

Credential phishing page harvesting email + password (1 password field, 1 username field)

Cross-origin credential submission to informattion.000webhostapp.com, a third-party free-hosting domain reported as apt sidewinder malware

Brand impersonation of a ministry mail service ("MoFA Email Server", "Yahoo - login") on an unrelated netlify.app subdomain

Threat-intel match on the primary domain for a named malware family (apt sidewinder), corroborated by 2 feeds

Right-click blocking / anti-analysis JavaScript

Page text addresses the security context of the scan (claim of a device/server authentication prompt) rather than normal site content

Domain age information unavailable

Details

Page Title

Yahoo - login

Scan Type

public

Domain Name Analysis

You're looking at domain 'mail-mof-gov-np.netlify.app' on the application-focused generic top-level domain (.app) with subdomain 'mail-mof-gov-np'. Its registrable label 'netlify' stretches across 7 characters holding 2 vowels versus five consonants. Word splitting yields 3 words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.03s

Total Load Time

7 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:53%

Script:Latin

Direction:ltr

Detection Details

Text Length:192 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software60% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

60%

documentation technical

41%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
3	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
6	2	-	-