Security Scan Report: proposal-soumission.web.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 5 domains to perform 20 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://proposal-soumission.web.app/

AI Security Verdict

High Risk

Confidence: 55%

7
Risk Score

Gated 'Document Preview' loading page on an unknown-age .web.app subdomain; no forms or credential capture found, but 3 HIGH IDS alerts for obfuscated JavaScript keep it suspicious. Single-source phishing reports concern other domains, not this one.

Risk Factors (5)
Obfuscated JavaScript flagged 3 times by network IDS (ET WEB_CLIENT Obfuscated Javascript // ptth)
Unknown-age subdomain on the shared Firebase hosting platform (.web.app) where content can be published instantly behind an old apex
Unranked in Cisco Umbrella top 1M — no reputation backing for a page that gates its content
eval() dynamic code execution present
Page renders no substantive content, only a Cloudflare Turnstile loading gate — common shape of a document-lure landing page, though no form was captured
Domain age information unavailable

Details

Page Title

Document Preview

Scan Type

public

Domain Name Analysis

The domain name 'proposal-soumission.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'proposal-soumission'. Its registrable label 'web' stretches across 3 characters split between 1 vowel and 2 consonants. It segments into 1 word: web. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://proposal-soumission.web.app/

Page Load Overview

1.06s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:140 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical69% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
69%
technology software
51%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.16.79.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2146.75.121.137Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
208--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A0A2F83B24A704232513A1A67BA366057F2540077947F867BB9E830C9FDDB99D8137F8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:DZiNMLuIHH2BfXvEyWY+aSZzgAyeI426e5:UNML3HH2BfTXSe

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21846:90EQkQjAPAcSqBhQyiBa21FMGIZiiKJJVBCCBxQgxVAAi5ojAgrLBoEUEFCIKIpwI+pAiEkAEH+LICIAgGkKJEBB4NBDtKbr

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7c3c3ffff
Perceptual Hash:b3cecc3033d94c66
Difference Hash:000000080a160000
Wavelet Hash:0c0c430181c3ffff
Color Hash:#5e40bf

Other Hashes

Crop Resistant:000000080a160000

Scan History

Scan history not available

Unable to load historical scan data