Security Scan Report: garanti-tr.web.app

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://garanti-tr.web.app/

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Empty placeholder on a free .web.app subdomain whose 'garanti-tr' label echoes a bank brand. No forms, no malware or threat-intel hits, so nothing is actively harmful, but the page is anonymous and unverifiable — do not enter any data if content appears.

Risk Factors (4)
Deceptive-looking hostname referencing a financial brand on an anonymous free hosting subdomain
Empty placeholder page with only a generic 'Document' title — typical of a staged or abandoned phishing/template deployment
Unranked, reputation-less tenant on a shared hosting platform
Page scripts contact an unrelated external host via XMLHttpRequest (cross-origin behaviour without legitimate form activity to justify it)
Safety Factors (4)
No credential or payment forms on the page — nothing is currently being harvested
No threat-intelligence matches, no JavaScript malware patterns, no IDS alerts, no known-kit roster hits
No cross-origin credential exfiltration detected
No obfuscated JavaScript or third-party script hosts beyond one CDN reference
Domain age information unavailable

Details

Page Title

Document

Scan Type

public

Domain Name Analysis

Domain 'garanti-tr.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'garanti-tr'. The second-level label 'web' is 3 characters long split between one vowel and 2 consonants. Word splitting yields one word: web. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://garanti-tr.web.app/

Page Load Overview

0.38s
Total Load Time
78 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:8 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
213.32.99.21Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
42--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EF1100A18DB6904DA01EC2312CF0F20C8755C840D366CC1475FE612ACECA74748E3AEC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:ntWXyTXi5C055mVt0dHqwDHwlslPHZfVukZuhKWIzynXgMMNF:nzTSr5lKQtZuhvbgvF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:915:AAQAIAAAQBAAAAAAAAQAAAAAAoAAAAAAAAAAAAAACAAAAAAAAAQAAACAACIAAAAAAAAAAAEAAQAIAAAAAABCAAAAAAAIAAgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:b34ccc3333cccc93
Difference Hash:0000000c08000000
Wavelet Hash:0c0c3c24233b0f0f
Color Hash:071c0000000

Other Hashes

Crop Resistant:0000000c08000000

Scan History

Scan history not available

Unable to load historical scan data