Security Scan Report: gilded-baklava-b9e48a.netlify.app

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 63 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://gilded-baklava-b9e48a.netlify.app/

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Static Amazon-clone demo on a free Netlify subdomain using Amazon's branding without authorization. No forms, no data collection, no malware or Indicators of Compromise — likely a practice project, but brand misuse warrants caution.

Risk Factors (3)
Uses Amazon's brand/UI (title 'Amazon Project', 'Returns & Orders', 'Add to Cart') on a domain unrelated to Amazon
Hosted on an anonymous free-tier subdomain where content can be published instantly
20 INFO-level Suricata hunting alerts flagging Netlify-hosted possible phishing landing (informational, not corroborated)
Safety Factors (1)
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Amazon Project

Scan Type

public

Domain Name Analysis

Domain 'gilded-baklava-b9e48a.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'gilded-baklava-b9e48a'. The registrable portion 'netlify' spans 7 characters split between two vowels and five consonants. It segments into three words: net, li, fy. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Returns) '& Orders 395 Black and Gray Athletic Cotton Socks - 6 Pairs tortie 87 $10.90 Intermediate Size Basketball Fert 127 $20.95 Adults Plain Cotton T-Shirt - 2 Pack Forti 56 $7.99 Add to C...

Page Load Overview

2.41s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:3,803 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content50% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
50%
healthcare medical
37%

Detected Features

Products

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1863.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
15142.251.110.95Google · CDNUnited States
AS15169Google LLC
1535.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
15142.251.20.94Google · CDNUnited States
AS15169Google LLC
634--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19C51332745E1A0B7022281E1A6B13BADBCC59503D7699544F5FD03D58FE2E82995381D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:VcTGhONaeC/hVNSNw6/RaR7ZtpHGN3aN7Mnd/s:iTGlBZP6/0tFw3aNwnd/s

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2633:AghAwABABEQAJABAAQAAJAGAEkAAAAABRpwoEIACEAAIARAAAIQREJGCgAAAAAAAZASAAICAAQQQgIABgEiIAEwBgQAAAAgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0081fdffff44ffff
Perceptual Hash:9a1b1f53cf4c404f
Difference Hash:690979934c9ca813
Wavelet Hash:00001dff6640feff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data