ScanMalware.com

Security Scan Report: cool-hummingbird-0ff756.netlify.app

Redirected to:
https://cool-hummingbird-0ff756.netlify.app/
Site favicon
Submitted: Jul 27, 2026, 2:45:07 PMCompleted: Jul 27, 2026, 2:46:15 PMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is cool-hummingbird-0ff756.netlify.app and was registered NaN years ago.

Submitted URL: http://cool-hummingbird-0ff756.netlify.app/

Effective URL: https://cool-hummingbird-0ff756.netlify.app/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

The site impersonates Roblox, collects credentials, and is flagged by Google Safe Browsing – confirmed phishing scam.

Risk Factors
Brand impersonation of Roblox
Credential collection form
Unranked / unknown‑age subdomain on a hosting platform
Google Safe Browsing phishing detection
Domain age information unavailable

Details

Page Title

Log in to Roblox

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

corporate business

(90%)

Domain Information

The domain 'cool-hummingbird-0ff756.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'cool-hummingbird-0ff756'. Its registrable label 'netlify' stretches across 7 characters split between two vowels and five consonants. Splitting it apart reveals 3 words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://cool-hummingbird-0ff756.netlify.app/

Page Load Overview

1.09s
Total Load Time
18
HTTP Requests
3
Domains
418 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:504 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business90% confidence
Type: webapp
Method: ml+structural

All Detected Categories

corporate business
90%
entertainment media
66%
technology software
40%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
935.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
9104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
182--

Page Statistics

18
Requests
3
Unique Domains
421.3 KB
Total Size

Detected Technologies1

PasswordField
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T137D1EBB251F450671252C1C47AA6AB2E3ED3C00BDA86D98177FC2A895FC6D83DD0786D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nDKkrwZN5jNzcPHHjmAQyaJq0haZekeM0gYrduvawyXLz7M1pbvOsUpWA81HDhUb:nDKdcvtQyaJUtYduu7MHbvMEjhWNw2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6250:IKecAGBBp0AIGwiwAgVAwMUAIJIg4JCUFMAqkCSFAEAZBIkRUgJECAIQFzIBhkAAgBRYAYjCtABPOCCAgkyDFAYQcAUKwQAL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:73181a3b1cfe1018
Perceptual Hash:8c8d62e2caa5f4da
Difference Hash:e77132f2b0b6e371
Wavelet Hash:f11c1e7b1cfe101c
Color Hash:#401f93

Other Hashes

Crop Resistant:e77132f2b0b6e371

Scan History

Scan history not available

Unable to load historical scan data