ScanMalware.com

Security Scan Report: op2-tec-authorized-docwmtm.web.app

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/47df5ff3-db19-401a-a8f4-cc7f81aca57bDomain and IP registration (RDAP)/api/v1/rdap/47df5ff3-db19-401a-a8f4-cc7f81aca57bHow often this domain was scanned/api/v1/domain/stats/op2-tec-authorized-docwmtm.web.appScan history for this domain/api/v1/domain/history/op2-tec-authorized-docwmtm.web.app?limit=15
This website contacted 3 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://op2-tec-authorized-docwmtm.web.app/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Fake 'Microsoft Sharepoint' protected-document page on an unrelated Firebase subdomain with a forged robot-verification gate and anti-analysis JavaScript. Strong brand impersonation; do not enter credentials or click through.

Risk Factors (5)
Impersonation of Microsoft SharePoint brand on a non-Microsoft domain
Deceptive 'document protected' / CAPTCHA-style access gate
Randomized keyword-stuffed subdomain on free hosting platform
Right-click blocking and anti-analysis JavaScript behavior
No reputation or ranking for the host; page creation date unknown
Domain age information unavailable

Details

Page Title

Embrace the Future

Scan Type

public

Domain Name Analysis

Domain 'op2-tec-authorized-docwmtm.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'op2-tec-authorized-docwmtm'. The registrable portion 'web' spans 3 characters split between 1 vowel and 2 consonants. Splitting it apart reveals one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Document Protected by Microsoft Sharepoint Oe OP were me te = + ae I'm not a robot , Verify you are human —_eovortane Busy Hele ee lead o* a 73

Page Load Overview

3.45s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Text Length:91 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software85% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
85%
documentation technical
72%
adult content
55%
cryptocurrency blockchain
51%
government public service
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
83--

Detected Technologies3

HTTP/3
40%
HSTS
40%
Firebase
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12A4423B240B37DF46D20325A627612106D24BD7B62A8E0E83D0DD4EAFBCDE5C9E5DC94

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:TgYn2jxMixvbRX7DnbVYx7jVloOh7YHpQxFNGXZmqYk:0ndDbVYhffCJWN+JYk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:257576:sYwKcTgVIJIFpOgScJYKihwQHEB0wPICiwIAHiBWJLCCAuKCtUEQAQghEEkAIIED9Co1ICUKYGOZBYLAakIkCkzdNeAsBBUL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff7fc1dbffffcb
Perceptual Hash:a853175779691647
Difference Hash:909db393b3b6fbb3
Wavelet Hash:004f5f41515f7f49
Color Hash:N/A

Other Hashes

Crop Resistant:9adcb393b7b7fbb3,00000832b2b21800,4507071333329686,01070f37b3b69696

Scan History

Scan history not available

Unable to load historical scan data