Security Report: att-welcome.netlify.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fcceaf28-d6cc-4e27-b297-213050fd744d Domain and IP registration (RDAP)/api/v1/rdap/fcceaf28-d6cc-4e27-b297-213050fd744dHow often this domain was scanned/api/v1/domain/stats/att-welcome.netlify.app Scan history for this domain/api/v1/domain/history/att-welcome.netlify.app?limit=15

This website contacted 4 IPs in 2 countries across 3 domains to perform 7 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://att-welcome.netlify.app/

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Fake AT&T 'new customer guide' on a netlify.app subdomain using AT&T branding, payment-hold pressure and a non-AT&T VIP phone number to lure victims into calling and paying.

Risk Factors (6)

Brand impersonation of AT&T on a non-official domain

Hosted on a free/shared platform subdomain (netlify.app) with unknown creation date

Unverified 'VIP support' phone number used as the contact/collection channel

Urgency and payment-pressure language around holds, sales tax and deadlines

Gift card and bill-payoff lures requesting the victim's prior carrier bill

Host not present in Cisco Umbrella top 1M

Domain age information unavailable

Details

Page Title

Welcome to AT&T – New Customer Guide

Scan Type

public

Favicon Hash

MMH3: -1742728723

MD5: e0dc6025f3ad91101529eaab3879cf79

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'att-welcome.netlify.app' is registered and includes subdomain 'att-welcome'. Its registrable label 'netlify' stretches across 7 characters split between two vowels and 5 consonants. Breaking it apart gives 3 words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.51s

Total Load Time

149 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:5,228 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical58% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

58%

technology software

40%

e-commerce shopping

33%

finance banking

32%

government public service

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	142.250.154.94Google · CDN	United States	AS15169Google LLC
7	4	-	-