Summary
API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4b29673c-efea-4c24-bb1c-bc8b6c0feadeDomain and IP registration (RDAP)/api/v1/rdap/4b29673c-efea-4c24-bb1c-bc8b6c0feadeHow often this domain was scanned/api/v1/domain/stats/account-access-view.web.appScan history for this domain/api/v1/domain/history/account-access-view.web.app?limit=15This website contacted 22 IPs in 3 countries across 17 domains to perform 85 HTTP transactions. The main domain is web.app and was registered 7 years ago.
Submitted URL: https://account-access-view.web.app/
Effective URL: Redirected
https://www.santander.co.uk/
AI Security Verdict
Moderate Risk
Confidence: 68%
5
Risk Score
Redirect entry host is a single-source phishing-reported free-hosted subdomain with a banking-lure name, but it forwards to the real Santander UK site; no credential forms were served in this capture.
Risk Factors (4)
Single-source phishing report against the entry hostname account-access-view.web.app
Banking-lure style hostname on a free/instant hosting namespace where subdomains can be created anonymously at any time
Cross-domain redirect from an unrelated, unranked subdomain into a bank's domain — a pattern also used to launder campaign links past filters
Datacenter scanner received a challenge page while a residential client got real content (bot-protection consistent, but it prevents consistent inspection)
Safety Factors (6)
The captured page content is the authentic Santander UK site reached by redirect, not a lookalike — no brand impersonation
No credential, password or payment fields in the parsed DOM
No hunting rule, kit-roster, native-scanner or network IDS detections
No JavaScript credential exfiltration or suspicious obfuscation observed
Third-party scripts contacted are established, top-1M ranked marketing/consent services
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable
Details
Page Title
Online
Scan Type
public
Domain Name Analysis
The domain name 'account-access-view.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'account-access-view'. The core label 'web' covers 3 characters with 1 vowel and 2 consonants. It segments into one word: web. No strong language cues emerged from the frequency lists.
Screenshot
Page Load Overview
1.72s
Total Load Time
2.4 MB
Total Size
Language Analysis
Primary Language
🇺🇸English
Code: enConfidence:80%
Script:Latin
Direction:ltr
Detection Details
HTML Lang Attribute:en
Text Length:17 chars
Detector Agreement:0%
Website Classification
Primary Category
finance banking49% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker
All Detected Categories
finance banking
49%
corporate business
47%
Detected Features
No structural features detected
Domain & IP Information
| Requests | IP Address | Location | AS Autonomous System |
|---|---|---|---|
| 22 | 199.36.158.100Fastly · CDN | United States | AS54113Fastly, Inc. |
| 3 | 23.53.43.58Akamai · CDN | Frankfurt am Main, Hesse, Germany | AS20940Akamai International B.V. |
| 3 | 23.52.181.12Akamai · CDN | Frankfurt am Main, Hesse, Germany | AS16625Akamai Technologies, Inc. |
| 3 | 104.18.32.137Cloudflare · WAF | United States | AS13335Cloudflare, Inc. |
| 3 | 23.53.42.249Akamai · CDN | Frankfurt am Main, Hesse, Germany | AS20940Akamai International B.V. |
| 3 | 146.75.121.55Fastly · CDN | Frankfurt am Main, Hesse, Germany | AS54113Fastly, Inc. |
| 3 | 35.169.83.195Aws · CLOUD | Ashburn, Virginia, United States | AS14618Amazon.com, Inc. |
| 3 | 23.50.131.138Akamai · CDN | Frankfurt am Main, Hesse, Germany | AS20940Akamai International B.V. |
| 3 | 23.50.131.154Akamai · CDN | Frankfurt am Main, Hesse, Germany | AS20940Akamai International B.V. |
| 3 | 172.64.155.119Cloudflare · WAF | United States | AS13335Cloudflare, Inc. |
| 85 | 22 | - | - |
Detected Technologies15
50%
50%
50%
50%
50%
40%
40%
40%
30%
20%
Content Similarity HashesFor malware variant detection
TLSH (Trend Micro Locality Sensitive Hash)
Security-focused
Specialized for malware detection and similarity analysis
T1F05182DE2C98C168A9372F1D55C5F414834AFE6B8838CCDE23AB116EC352FB4161A41F
ssdeep (Context Triggered Piecewise Hashing)
Context-aware
Detects similar content even with modifications
48:b1bcoDOo5KoNYoaNjoGp6fl3MAV3pS2DGffF/J4IIrNIj:BJsNjp6fl3MA3pS2D0/J0rNIj
sdhash (Similarity Digest Hashing)
High-precisionHigh-precision similarity detection for forensic analysis
sdhash:3:2805:EACAQEOgggsAAgjQCAAAgAAAiKAgAABAIQAAgAAAAIEICCAMAQhFQIAQABBAgAACAACgBAIAQCAAAIGCACEXAAAAIBEAABAg
These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.
Image Hashes
Perceptual Hashes
Average Hash:ffff03000004ffdb
Perceptual Hash:ac07fcd27cc32c2c
Difference Hash:64bebfceecfd3333
Wavelet Hash:ffff03000000ffdb
Color Hash:06200030000
Other Hashes
Scan History
Scan history not available
Unable to load historical scan data