Security Scan Report: deploy-preview-19350--ethereumorg.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 3 domains to perform 90 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://deploy-preview-19350--ethereumorg.netlify.app/

AI Security Verdict

High Risk

Confidence: 58%

7
Risk Score

High risk driven solely by an uncorroborated single-source phishing report on a netlify.app deploy-preview subdomain wearing ethereum.org branding; page itself has no forms, no malicious JS and reports to the Ethereum Foundation's own analytics host — plausibly a genuine preview, so verify against ethereum.org before trusting.

Risk Factors (4)
Single-source unverified phishing report on the primary domain
ethereum.org branding served from a non-ethereum.org netlify.app preview subdomain
Shared hosting-platform subdomain of unknown actual age, unranked reputation
Ticket discount code promotion embedded in brand-styled content
Domain age information unavailable

Details

Page Title

Ethereum - The complete guide from ethereum.org

Scan Type

public

Domain Name Analysis

The domain name 'deploy-preview-19350--ethereumorg.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'deploy-preview-19350--ethereumorg'. The core label 'netlify' covers 7 characters split between two vowels and five consonants. Splitting it apart reveals three words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://deploy-preview-19350--ethereumorg.netlify.app/

Page Load Overview

3.44s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,663 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain70% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
70%
documentation technical
39%
technology software
36%
corporate
35%
cryptocurrency
22%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1563.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
153.126.133.169Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1535.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1518.195.235.189Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1518.157.122.248Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
15212.99.218.66Zwönitz, Saxony, Germany
AS21413Envia Tel GmbH
906--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12F74292AE400CD6FE81B8D4D653DFF36D14D9A7AC3A69C69E2ECCA1051C79396B538C0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:5JUyyn0cSya1Jy8VU4Zyyn0cSya1Jy8VU43l7FkwnmpbrkxQOa2F/59:D7Ve9VeO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:368256:zQFhsU5JGGgkIJGwVuF+xEJwFBSkwGE0hAkuCUCCoEZkgEsHKClgECMA/KUkKFFAAJAACXu0QDgDQmgVlBDQbEAgYKmE+YgB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8181fd8181ffe7ff
Perceptual Hash:ef2af43a1bb2d082
Difference Hash:3b3369697b490c0e
Wavelet Hash:8181818181ffe7ff
Color Hash:#1f935d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data