Security Scan Report: legendary-narwhal-00f0c4.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 3 countries across 8 domains to perform 10 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://legendary-narwhal-00f0c4.netlify.app/?utm_source=sniply&utm_campaign=sniply&utm_medium=sniply

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake pCloud file-transfer page on a netlify.app subdomain harvesting email and password via a document lure, with a Telegram bot token in its script for exfiltration.

Risk Factors (5)
Brand impersonation of pCloud on a non-official domain
Credential-harvesting form (email + password) behind a fake document-share lure
Telegram bot token embedded in inline script for credential exfiltration
Phishing threat-intelligence match on the primary domain
Free hosting subdomain with unknown age and no domain reputation
Domain age information unavailable

Details

Page Title

pCloud-Fichier sécurisé/

Scan Type

public

Domain Name Analysis

You're looking at domain 'legendary-narwhal-00f0c4.netlify.app' on the application-focused generic top-level domain (.app), featuring subdomain 'legendary-narwhal-00f0c4'. The second-level label 'netlify' is 7 characters long with two vowels and 5 consonants. Breaking it apart gives 3 words: net, li, fy. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

pCloud Transfer Vous avez reçu un fichier sécurisé Je | acte de_propriete.puf es Pour lire le document veuillez entrer les identifiants de messagerie auxquels ce fichier a été envoyé. | Entrez l'a...

Page Load Overview

1.01s
Total Load Time
87 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:366 chars
Detector Agreement:67%

Website Classification

Primary Category

real estate property88% confidence
Type: static
Method: ml+structural

All Detected Categories

real estate property
88%
documentation technical
45%
technology software
40%
cryptocurrency blockchain
34%
corporate business
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1063.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0141.101.90.99Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0185.15.59.240United States
AS14907Wikimedia Foundation Inc.
0188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0172.67.69.232Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0213.186.33.87Saran, Centre-Val de Loire, France
AS16276OVH SAS
0188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
079.127.211.90Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
035.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0141.101.90.98Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1011--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T176F1B38B42F71CA63147A0A13BB6A7057662C1038D0ACC417F6D539DDF4AD96A9F73C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:mfdPVFe7rU/yGgF/mFZRL6EJ6lzkucv35mHJ4i8iQi9n55h4i5milz:mfdnFCrmucv30Ci8iQi9raikilz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7974:KAHCschJUAIABABBFAkyRxPkBXisEAMSIWAAGPgQiSInIKBMRagmhDBExEOGoTEBjQ6hE0yHYHgEhGOQkWAQQAgAgymDYAog

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:b399cc6699cc2699
Difference Hash:0000080c0c4d0000
Wavelet Hash:3c2424242727273f
Color Hash:N/A

Other Hashes

Crop Resistant:0000080c0c4d0000

Scan History

Scan history not available

Unable to load historical scan data