Security Scan: Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6a7a07a1-9364-4fc2-a0e4-3a335d8be6ca Domain and IP registration (RDAP)/api/v1/rdap/6a7a07a1-9364-4fc2-a0e4-3a335d8be6caHow often this domain was scanned/api/v1/domain/stats/review-login-mobile.web.app Scan history for this domain/api/v1/domain/history/review-login-mobile.web.app?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://review-login-mobile.web.app/

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Page matches an analyst-vetted UK mobile/bank 'account recovery' phishing kit (critical YARA hit) and is cloaked, presenting only a blank shell to this scanner. Avoid and report.

Risk Factors (4)

Known malicious phishing kit identified by analyst-vetted kit roster (CRITICAL)

Critical high-precision YARA match on the HTML body (cloak kit pattern)

Cloaked content: visible page is a blank 'Cloak' shell rather than the real lure

Hosted on a free, instantly provisioned web.app subdomain with no reputation and unknown page age

Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Favicon Hash

MMH3: 708753611

MD5: a1fb669eaf3f793c9f217f2777f7a499

Domain Name Analysis

Domain 'review-login-mobile.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'review-login-mobile'. The core label 'web' covers 3 characters holding 1 vowel versus two consonants. It segments into one word: web. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.