mass.report
Scan Intelligence Report0/100
high Risk
thepointjetski.com
https://thepointjetski.com/
IP
75.102.58.14 · DEFT.COM
Location
Amsterdam, Netherlands
Domain Age
16 days
HTTP
200 · 45.1s
SSL
Valid· R12, Let's Encrypt, US
Status
COMPLETED
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
The Point Jet Ski
Unknownsupply_chain | technology | ecommerce | tourism | travel · 4/5/2026
Summary
The page on thepointjetski.com presents Jet Ski hire branding and appears to be a real site for a jet ski rental service. However, the domain is newly registered (16 days) and the page contains off-domain submission endpoints, multiple external trackers, and an impersonation-friendly UI that could be used for credential harvesting. The combination of a legitimate-looking brand with aggressive tracking and off-domain endpoints raises concerns about potential abuse or credential-phishing risk, but there is no definitive evidence of a credential capture form on the provided static content.
Evidence Summary
▸Observed 3 capture stage(s); canonical stage is late_render_3s.
▸Off-domain submission or API endpoints observed: https://api.consentframework.com/api/v1/public/profile?origin=https://thepointjetski.com, https://api.consentframework.com/api/v1/public/user-action.
▸Distinctive asset clues: api.js, cmp, 7a29b13c69d3405f2584842507da06be.css, b80c7b4110897e7eee4f084aecb0fdb2.css, SHADOW-PLANT-3.0.png, Property-1Default_11zon.webp.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 3
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 172
Hosts: 15
Domains: 10
Suspicious Endpoints
hxxps://api[.]consentframework[.]com/api/v1/public/profile?origin=https://thepointjetski.com
hxxps://api[.]consentframework[.]com/api/v1/public/user-action
hxxps://thepointjetski[.]com/
Off-Domain Posts
hxxps://api[.]consentframework[.]com/api/v1/public/profile?origin=https://thepointjetski.com
hxxps://api[.]consentframework[.]com/api/v1/public/user-action
Observed Signals (0)
Observed Indicators (0)
No suspicious indicators identified
Risk AssessmentUsed in abuse reports
The domain is newly registered and hosts a brand-aligned Jet Ski rental site. While there is no direct evidence of credential harvesting or malware delivery from the static HTML, the presence of off-domain endpoints, a large number of external scripts, and iframes increases risk of hidden tracking and potential data exfiltration. The combination of a young domain with extensive third-party integrations warrants cautious monitoring. If this site is being evaluated for abuse, consider treating as a potential first-party service with elevated privacy/security scrutiny until deeper testing confirms safe behavior.
Recommended Action
Monitor
Cross-Reference8
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API