Security Scan Report: grubhubsupport.team

Site favicon
Submitted: Sep 24, 2026, 11:13:40 PMCompleted: Sep 24, 2026, 11:16:40 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

grubhubsupport.team appropriates the GrubHub brand on an unranked 115-day-old domain. Empty placeholder now, but the deceptive hostname signals staged phishing - do not enter credentials or trust it as GrubHub support.

Risk Factors (3)
Typosquat/brand-abusing hostname targeting a well-known brand's support channel
No forms or legitimate content yet - consistent with pre-activation phishing staging
Unranked, newly registered domain posing as brand support
Safety Factors (4)
No credential or payment forms currently present
No malware, YARA, IDS, or threat-intelligence matches detected
No cross-origin credential exfiltration observed on the placeholder page
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Coming Soon

Scan Type

public

Domain Name Analysis

The domain name 'grubhubsupport.team' uses the .team top-level domain. Its registrable label 'grubhubsupport' stretches across 14 characters with four vowels and ten consonants. Word splitting yields 3 words: grub, hub, support. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://grubhubsupport.team

Page Load Overview

5.60s
Total Load Time
875 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:65%
Script:Latin
Direction:ltr

Detection Details

Text Length:95 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software53% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
53%
government public service
52%
real estate property
50%
documentation technical
49%
healthcare medical
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3198.49.23.144Squarespace · CLOUDUnited States
AS53831Squarespace, Inc.
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2146.75.120.237Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2198.49.23.145Squarespace · CLOUDUnited States
AS53831Squarespace, Inc.
2142.251.110.94Google · CDNUnited States
AS15169Google LLC
2198.185.159.145Squarespace · CLOUDUnited States
AS53831Squarespace, Inc.
136--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T149F0AC5BFC21880CD62157C398E0FD19544CDF28A24DDCC090DA85AAAAC8BCE888F16C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hax6Q52M+1u+8h2NUa8pp4sx1ielJmmKV1L1XJmmKV1G:hacQ5t+l80afLOePG1bG1G

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:609:AAAAAEAAIAAACAAAAABAAAgAAkAAAAAAAAAAgAAAAIAAAAAAABAAAAAAAAAQAAAAAAAAAAAAAAAAACCAAAACABAAAAAAgAAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8fcb8f0f0e0c0a0
Perceptual Hash:cd9f3af0c038e10f
Difference Hash:123060e2c2931343
Wavelet Hash:f8fcf8f8f0e0c0a0
Color Hash:#87c5a5

Other Hashes

Crop Resistant:123060e2c2931343

Scan History

Scan history not available

Unable to load historical scan data