Security Scan: https://vystar-member1.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5ce1440f-b013-4de8-a8f6-b319ced688bd Domain and IP registration (RDAP)/api/v1/rdap/5ce1440f-b013-4de8-a8f6-b319ced688bdHow often this domain was scanned/api/v1/domain/stats/vystar-member1.web.app Scan history for this domain/api/v1/domain/history/vystar-member1.web.app?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://vystar-member1.web.app/

Effective URL:

https://logins.cc/jayVystarCU/index.php

Redirected

AI Security Verdict

Moderate Risk

Confidence: 80%

Risk Score

web.app host named 'vystar-member1' impersonating VyStar Credit Union and redirecting to branded login path on unranked logins.cc. Destination currently 502s, but the brand-impersonation phishing chain is clear — avoid.

Risk Factors (4)

Impersonation of a different entity's brand (VyStar Credit Union) in both the subdomain and the redirect path

Cross-domain redirect from a web.app lure host to an unrelated domain (logins.cc) styled for a credit union login

Unranked, non-brand domain used to host the branded 'verification' page

Deceptive 'verification page' framing typical of credential-harvesting funnels

Safety Factors (5)

No credential, password or payment form was parsed from the captured DOM (total forms = 0) — the destination page failed to load

No JavaScript malware patterns, no native-hunting-rule hits and no known phishing kit matched

No network IDS alerts and no Indicators of Compromise matched against the scanned page or its resources

No cross-origin credential exfiltration observed

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'vystar-member1.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'vystar-member1'. The registrable portion 'web' spans 3 characters with one vowel and two consonants. Tokenizing the label suggests one word: web. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page did not load

The browser never reached this site, so there is no screenshot of it.

Page Load Overview

0.19s

Total Load Time

2 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
4	1	-	-

Detected Technologies3

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: vystar-member1.web.app