Security Scan: Session Timed Out

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6bd0e749-a575-4acd-9555-c89ca507b81d Domain and IP registration (RDAP)/api/v1/rdap/6bd0e749-a575-4acd-9555-c89ca507b81dHow often this domain was scanned/api/v1/domain/stats/cwbwka.web.app Scan history for this domain/api/v1/domain/history/cwbwka.web.app?limit=15

This website contacted 8 IPs in 2 countries across 5 domains to perform 7 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://cwbwka.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Credential phishing page on a free web.app subdomain using a fake session-timeout password prompt, with a login form and cross-origin POST to an unrelated easywp.com endpoint; domain is flagged as phishing.

Risk Factors (5)

Credential-harvesting login form collecting email and password

Deceptive password re-authentication prompt using urgency/sensitive-information language

Cross-origin POST to an unrelated easywp.com endpoint from inline JavaScript

Hosted on a free Firebase web.app subdomain with unknown creation date

Primary domain flagged in phishing threat intelligence

Domain age information unavailable

Details

Page Title

Session Timed Out

Scan Type

public

Favicon Hash

MMH3: -1244119283

MD5: 1b61251c552bf68954ca62873e1aa2cc

Domain Name Analysis

You're looking at domain 'cwbwka.web.app' on the application-focused generic top-level domain (.app) and includes subdomain 'cwbwka'. The core label 'web' covers 3 characters containing 1 vowel alongside 2 consonants. Breaking it apart gives 1 word: web. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.66s

Total Load Time

99 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:57%

Script:Latin

Direction:ltr

Detection Details

Text Length:159 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism34% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism

34%

cryptocurrency blockchain

34%

government public service

32%

healthcare medical

29%

phishing scam

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
0	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.250.154.95Google · CDN	United States	AS15169Google LLC
0	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	185.151.30.189	United Kingdom	AS4825420i Limited
0	142.251.110.95Google · CDN	United States	AS15169Google LLC
0	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	8	-	-