Security Scan: Validación

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e79a3e4d-6075-408c-bb07-3288b44ea6bf Domain and IP registration (RDAP)/api/v1/rdap/e79a3e4d-6075-408c-bb07-3288b44ea6bfHow often this domain was scanned/api/v1/domain/stats/php-web-server--unitmexi.replit.app Scan history for this domain/api/v1/domain/history/php-web-server--unitmexi.replit.app?limit=15

This website contacted 7 IPs in 1 country across 6 domains to perform 15 HTTP transactions. The main domain is replit.app and was registered 5 years ago.

Submitted URL: https://php-web-server--unitmexi.replit.app/index1.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake WhatsApp verification page on a replit.app subdomain harvesting phone numbers for account takeover; Safe Browsing social-engineering hit and two-source phishing intel confirm it. Do not enter a number.

Risk Factors (7)

Brand impersonation of WhatsApp on a non-WhatsApp domain

Phone-number/verification-code collection for account takeover

Google Safe Browsing Social Engineering detection

Multi-source corroborated phishing threat-intel match on the primary domain

Free shared-hosting subdomain (replit.app) with unknown creation date and no Cisco Umbrella ranking — page-level age is not attributable to the platform apex

Spanish-language lure targeting 15+ Latin American countries, consistent with a mass credential-harvesting campaign

External IP-lookup beacon to ipapi.co from an inline script

Domain age information unavailable

Details

Page Title

Validación

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'php-web-server--unitmexi.replit.app' is registered; it also runs on subdomain 'php-web-server--unitmexi'. The core label 'replit' covers 6 characters containing two vowels alongside four consonants. Breaking it apart gives two words: rep, lit. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.82s

Total Load Time

558 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

Text Length:365 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network93% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network

93%

adult content

34%

phishing scam

33%

technology software

32%

finance banking

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	104.16.179.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	142.251.110.95Google · CDN	United States	AS15169Google LLC
2	192.178.183.94Google · CDN	United States	AS15169Google LLC
2	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	7	-	-