Security Scan Report: office2rdr2026.web.app

Redirected to:
https://stratland.com.au/wp-content/maintenance/assets/fonts/online.ac...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 6 domains to perform 35 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://office2rdr2026.web.app/

Effective URL:
https://stratland.com.au/wp-content/maintenance/assets/fonts/online.ac...
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Compromised WordPress site hosting an Active8me-branded 'Payment Update' phishing lure with a fake billing path and a phishing threat-intel hit; no credential form verified, but brand impersonation and evasion justify HIGH_RISK.

Risk Factors (6)
Brand impersonation of Active8me on a non-official domain
Compromised WordPress site used to host the lure
Single-source phishing threat-intel match on the entry domain
Deceptive URL path imitating online.active8me.com.au
Scanner-versus-client content divergence (evasion)
No reputation: unranked domain, unverifiable tenant age
Domain age information unavailable

Details

Page Title

Active8meother network

Scan Type

public

Domain Name Analysis

The domain 'office2rdr2026.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'office2rdr2026'. Count 3 characters in 'web' split between one vowel and 2 consonants. Splitting it apart reveals 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Active8me Payment Update Opening your document...

Page Load Overview

0.34s
Total Load Time
667 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:57 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software80% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
80%
finance banking
71%
cryptocurrency blockchain
43%
news media journalism
37%
government public service
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
5110.232.143.100Brisbane, Queensland, Australia
AS45638SYNERGY WHOLESALE PTY LTD
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
5216.239.32.36Google · CDNUnited States
AS15169Google LLC
357--

Detected Technologies17

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1325166E644E0109160F3C3F13BA231096152D0A7E54BD590769C1608DFDAF975EB738E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TRnqyzQaKzQ/YN9jvI7xWX3+pf3p1At2NqKUq2T/XV:TRt0aK0Aj07QXOp/4c3kF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2467:AIAACgAQYQAAAAQAgAApBAACCAIACkAAQAAAAJAABCAoAAIAhAAJAQCAEJAgACAQEABAAIAEBIAAARAAAIAkAAAEgABAEhgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:db746c5873724c58
Difference Hash:0044300828300800
Wavelet Hash:00ffcfc31b030f0f
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data