Security Scan Report: pagesp218.web.app

Redirected to:
https://fwadfwagr.firebaseapp.com/
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 5 domains to perform 7 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://pagesp218.web.app/

Effective URL:
https://fwadfwagr.firebaseapp.com/
Redirected

AI Security Verdict

Low Risk

Confidence: 58%

3
Risk Score

Bare 'Waitting....' placeholder on Firebase hosting that redirects between two tenants and silently geolocates visitors. No forms, no impersonation, no threat-intel or hunting-rule hits; suspicious-looking but no concrete malicious signal.

Risk Factors (3)
Empty interstitial 'Waitting....' page with no substantive content or explanation of purpose
Client-side visitor IP/geolocation lookups to third-party services on a page that displays nothing (consistent with visitor logging, though common on legitimate sites too)
Unattributed free-platform subdomain redirecting across to a second free-platform tenant
Safety Factors (4)
No credential, login, or payment form of any kind (verified from the captured DOM)
No brand impersonation — no other entity's name, logo, or login on the page
No Indicators of Compromise, no Safe Browsing threat, no hunting rule malware patterns, no vetted-kit match
External IP-lookup endpoints (db-ip.com, ipinfo.io) are legitimate geolocation services, not credential sinks
Domain age information unavailable

Details

Page Title

Waitting....

Scan Type

public

Domain Name Analysis

The domain 'pagesp218.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'pagesp218'. Its registrable label 'web' stretches across 3 characters with one vowel and 2 consonants. Segmentation suggests 1 word: web. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pagesp218.web.app/

Page Load Overview

0.33s
Total Load Time
68 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:25 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical29% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1172.67.75.166Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.217.208.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1104.26.4.15Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
174.125.29.95Google · CDNUnited States
AS15169Google LLC
76--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EE51008F20A132293DA37025DB5F7108EA27906B554CC954FCCED3542F19379E6537DA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hRjCty1RtlibCMy38fwUi8GpbUUWb0w6jZIAdONB7mXOUz120M6ZZZIg/JACLiJy:TppiGMeQUN/jK5NB7E/LZZKg/ikiiwNy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2876:AEIQAEIAwAQUQxBCAMIgEQEAAAAAAAAEAAGEEAAQABAAAAAEACIgC4AQAAAARCEqxCAICAICgACEIACEEAgIKIYggAAEQQIC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:81010303073fffff
Difference Hash:8000000000000000
Wavelet Hash:70f0f0f0f0f0f0f0
Color Hash:#931f3c

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data