Security Report: security-server-landing-page--ginola080.replit.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ea32b941-cabc-4f04-b4a1-c59e57050ed9 Domain and IP registration (RDAP)/api/v1/rdap/ea32b941-cabc-4f04-b4a1-c59e57050ed9 Certificate Transparency/api/v1/ct/security-server-landing-page--ginola080.replit.app How often this domain was scanned/api/v1/domain/stats/security-server-landing-page--ginola080.replit.app Scan history for this domain/api/v1/domain/history/security-server-landing-page--ginola080.replit.app?limit=15

This website contacted 10 IPs in 1 country across 8 domains to perform 12 HTTP transactions. The main domain is security-server-landing-page--ginola080.replit.app and was registered 23 years ago.

Submitted URL: https://security-server-landing-page--ginola080.replit.app/

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Fake 'example.com Mail Authentication' portal on a free replit.app subdomain harvesting email/password via a deceptive login form, backed by IP-lookup JS and fake error prompts. Credential phishing — do not enter any data.

Risk Factors (5)

Credential-capturing password form on a shared/instant-publish hosting namespace

Brand impersonation of example.com on a non-example.com domain

Cross-origin IP-lookup requests (ipapi.co, api.ipify.org) typical of phishing kits

Deceptive hostname 'security-server-landing-page--ginola080' unrelated to the claimed portal

Fake 'authentication error' retry flow designed to re-prompt for credentials

Domain age information unavailable

Details

Page Title

PORTAL - example.com Mail Authentication

Scan Type

public

Domain Name Analysis

You're looking at domain 'security-server-landing-page--ginola080.replit.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'security-server-landing-page--ginola080'. Count 6 characters in 'replit' with two vowels and 4 consonants. Splitting it apart reveals 2 words: rep, lit. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.69s

Total Load Time

354 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:400 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

75%

government public service

33%

documentation technical

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	34.117.33.233Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	35.190.3.23Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
1	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	52.72.208.91Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
1	142.251.153.119Google · CDN	United States	AS15169Google LLC
1	142.250.154.147Google · CDN	United States	AS15169Google LLC
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.155.119Google · CDN	United States	AS15169Google LLC
1	192.178.183.105Google · CDN	United States	AS15169Google LLC
12	10	-	-