Security Scan Report: finlesuvr.web.app

Redirected to:
https://online-app-deqzgal1.idm-tlkom.top/cb/?pwd=indx
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 5 countries across 11 domains to perform 22 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://finlesuvr.web.app/

Effective URL:
https://online-app-deqzgal1.idm-tlkom.top/cb/?pwd=indx
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Entry host carries an unverified phishing report and redirects to an unknown, unranked .top domain serving an expired-domain renewal lure with ad links. No credential forms, but the redirect chain and IDS hostility hits warrant avoiding it.

Risk Factors (4)
Phishing threat-intel report on the entry domain (single-source, unverified)
Redirect chain terminating on an unranked, unknown-age .top domain that is not the domain scanned
Expired-domain / renewal-lure landing page monetised with related-search ad links
HIGH IDS alerts for traffic to a *.top domain described as likely hostile
Domain age information unavailable

Details

Page Title

Page Redirectionother network

Scan Type

public

Domain Name Analysis

The domain 'finlesuvr.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'finlesuvr'. Its registrable label 'web' stretches across 3 characters split between one vowel and two consonants. Splitting it apart reveals one word: web. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://finlesuvr.web.app/

Page Load Overview

2.36s
Total Load Time
299 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:62%
Script:Latin
Direction:ltr

Detection Details

Text Length:112 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software38% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1103.224.212.142Australia
AS133618Trellian Pty. Limited
154.192.35.124Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
154.88.44.186Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
194.237.93.104Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
179.127.211.89Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1208.91.196.46British Virgin Islands
AS40034Confluence Networks Inc
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2219--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C6E2B42446F2041456572031DEBF6A8837754A27654CEC08BD8CAB40FFAEAB74EB67F4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:1BZBsjBjrAyhtbgt4MiIO/5/9SL3llx642H1pFVeH1pFVDQxGG:5MMhlxt2H1EH1ta

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34152:BAtmKE9CHITiCKIAAC0XCQEkAgwIJzGeGCAyYAFGB6ICDMQgGiBE2FcRbAkhYBSqMQHCAUiyEYAezVCX5DgkRAAUIQAYPJeG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c300000000ff
Perceptual Hash:a8609f4a9b4ebb25
Difference Hash:7196969797b3b33b
Wavelet Hash:0042ffdf431818ff
Color Hash:31007000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data