Security Scan: EE

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4c8412ac-83a2-4838-9479-e240874817cd Domain and IP registration (RDAP)/api/v1/rdap/4c8412ac-83a2-4838-9479-e240874817cdHow often this domain was scanned/api/v1/domain/stats/ee-help-account.web.app Scan history for this domain/api/v1/domain/history/ee-help-account.web.app?limit=15

This website contacted 10 IPs in 1 country across 6 domains to perform 24 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://ee-help-account.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 94%

Risk Score

Analyst-vetted UK mobile 'account recovery' phishing kit impersonating EE on a free .web.app subdomain, with CRITICAL YARA confirmation and geo-cloaked lure delivery. Do not interact.

Risk Factors (5)

Known phishing kit identified by analyst-vetted roster (CRITICAL, phishing category)

CRITICAL YARA match for the UK mobile owner-info cloak kit on the page HTML

Impersonation of UK carrier EE on an unrelated free-hosting subdomain (ee-help-account.web.app)

Geo/device-gated content delivery (external IP lookup domain contacted) used to hide the lure from non-target visitors and scanners

Free instant-hosting subdomain with unknown creation date, unranked in Cisco Umbrella, built to look like an account-recovery flow

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -1840109152

MD5: d15577dadea9c6e98717095c9c76664d

Domain Name Analysis

You're looking at domain 'ee-help-account.web.app' on the application-focused generic top-level domain (.app) with subdomain 'ee-help-account'. Its registrable label 'web' stretches across 3 characters containing 1 vowel alongside 2 consonants. Splitting it apart reveals one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.61s

Total Load Time

1.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2 chars

Detector Agreement:0%

Website Classification

Primary Category

technology software58% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

58%

cryptocurrency blockchain

34%

adult content

33%

documentation technical

30%

government public service

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.8.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.94Google · CDN	United States	AS15169Google LLC
2	142.251.152.120Google · CDN	United States	AS15169Google LLC
2	142.251.156.120Google · CDN	United States	AS15169Google LLC
2	142.251.151.120Google · CDN	United States	AS15169Google LLC
2	142.251.157.120Google · CDN	United States	AS15169Google LLC
2	142.251.13.94Google · CDN	United States	AS15169Google LLC
2	142.251.155.120Google · CDN	United States	AS15169Google LLC
24	10	-	-