Security Scan Report: webmaill-029949.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 7 domains to perform 18 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://webmaill-029949.netlify.app/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Google Safe Browsing confirms a Social Engineering (phishing) threat on this Netlify subdomain, which presents itself as a 'Webmail Login' under a look-alike hostname and POSTs to an unrelated external domain. Do not enter any credentials.

Risk Factors (5)
Google Safe Browsing Social Engineering (phishing) threat on the scanned URL
Look-alike 'webmail login' hostname on an instant-publishing Netlify subdomain
Cross-origin POST of page data to an unrelated third-party domain (welcomecrop.com)
Domain not present in Cisco Umbrella top 1M; no verifiable reputation
No form fields were captured, but the page's stated purpose ('Webmail Login!') plus the Safe Browsing phishing match indicate a credential-harvesting lure
Domain age information unavailable

Details

Page Title

Webmail Login!

Scan Type

public

Domain Name Analysis

You're looking at domain 'webmaill-029949.netlify.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'webmaill-029949'. The registrable portion 'netlify' spans 7 characters containing two vowels alongside 5 consonants. It segments into 3 words: net, li, fy. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://webmaill-029949.netlify.app/

Page Load Overview

5.22s
Total Load Time
195 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:32 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
735.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1812--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F152A3097CD25041B33350A8AFEF51187738E6135E09DC8B72AF14989F48EED99F276A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:gftmC5nU4oco7jub2oco7jubPfUzd7lrhQpz6b298y8rFqcL8ErXymCh6auPn+62:wtvUpfUzd7lrapGbYUFFXylgOT9z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:14161:QITGbsigLwEWlFKwsCkAFVIiggoTQK11GAQasEIqSmIQrjJCUJbtAKAolygAQwEgIqQwRAKgooGIjcSQQTkCBAilaGFTKKqk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:8707070f0f0f1f1f
Difference Hash:8000000000000000
Wavelet Hash:70f0f0f000000000
Color Hash:#d2a679

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data