Security Scan: EE

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6f9cd74a-f2a0-4813-b0f6-1fd03142e464 Domain and IP registration (RDAP)/api/v1/rdap/6f9cd74a-f2a0-4813-b0f6-1fd03142e464How often this domain was scanned/api/v1/domain/stats/ee-payment-error.web.app Scan history for this domain/api/v1/domain/history/ee-payment-error.web.app?limit=15

This website contacted 5 IPs in 1 country across 6 domains to perform 24 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://ee-payment-error.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed EE-branded phishing kit on a free web.app subdomain (uk-mobile-recovery-ownerinfo-kit-2026-10), matching a CRITICAL hunting rule; gated lure harvests logins, card data and porting codes to an operator backend.

Risk Factors (5)

Known malicious phishing kit identified by analyst-vetted roster and matching hunting rule

Impersonation of the UK mobile carrier EE on a domain that is not EE's official domain

Free hosting-platform subdomain (web.app) with a payment/account-error themed hostname

Content cloaking — visible text differs from the kit's actual lure, a hallmark of device/country-gated phishing

External operator API domain (c0dersapi.pro) and geolocation lookups consistent with victim profiling

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -1840109152

MD5: d15577dadea9c6e98717095c9c76664d

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'ee-payment-error.web.app' is registered and includes subdomain 'ee-payment-error'. Its registrable label 'web' stretches across 3 characters containing 1 vowel alongside two consonants. Word splitting yields 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

mot cbt c reCAPTCHA sQRPTCHAis changing its terms of service ‘ake acon

Page Load Overview

0.61s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2 chars

Detector Agreement:0%

Website Classification

Primary Category

technology software58% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

58%

cryptocurrency blockchain

34%

adult content

33%

documentation technical

30%

government public service

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
4	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	192.178.183.94Google · CDN	United States	AS15169Google LLC
4	142.251.110.94Google · CDN	United States	AS15169Google LLC
4	142.250.154.94Google · CDN	United States	AS15169Google LLC
24	5	-	-