Security Report: 5985n9mff-funfn994784ecd853-8478h84.netlify.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f7d4f783-56bb-4014-8b8e-cb5c57a2ce03 Domain and IP registration (RDAP)/api/v1/rdap/f7d4f783-56bb-4014-8b8e-cb5c57a2ce03How often this domain was scanned/api/v1/domain/stats/5985n9mff-funfn994784ecd853-8478h84.netlify.app Scan history for this domain/api/v1/domain/history/5985n9mff-funfn994784ecd853-8478h84.netlify.app?limit=15

This website contacted 5 IPs in 2 countries across 3 domains to perform 10 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://5985n9mff-funfn994784ecd853-8478h84.netlify.app/

Effective URL:

https://5985n9mff-funfn994784ecd853-8478h84.netlify.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake DHL page on a throwaway netlify.app subdomain that harvests email/password via a 'Download Now' form and posts the data to an unrelated external server (drones-tes.site); Safe Browsing flags it for social engineering.

Risk Factors (6)

Brand impersonation of DHL on a non-DHL domain

Credential-harvesting login form (email + password) tied to a 'Download Now' lure

Cross-origin JavaScript POST target (drones-tes.site) unrelated to the hosting domain

Obfuscated JavaScript detected by network IDS (hex-encoded script/substr/replace)

Google Safe Browsing Social Engineering verdict on the page

Untrusted, instantly-created shared hosting subdomain with no reputation

Domain age information unavailable

Details

Page Title

DHL - Global Logistics

Scan Type

public

Domain Name Analysis

The domain '5985n9mff-funfn994784ecd853-8478h84.netlify.app' uses the application-focused generic top-level domain (.app), featuring subdomain '5985n9mff-funfn994784ecd853-8478h84'. Its registrable label 'netlify' stretches across 7 characters holding 2 vowels versus five consonants. Splitting it apart reveals 3 words: net, li, fy. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Download Now Email Address Email Address Password Password

Page Load Overview

0.65s

Total Load Time

674 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:75%

Script:Latin

Direction:ltr

Detection Details

Text Length:145 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism56% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism

56%

download file sharing

52%

healthcare medical

42%

documentation technical

37%

technology software

35%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
2	142.251.14.95Google · CDN	United States	AS15169Google LLC
2	23.45.110.110Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
2	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
2	142.251.20.95Google · CDN	United States	AS15169Google LLC
10	5	-	-