Security Scan Report: enirvod.web.app

Redirected to:
https://online-app-deqzgal1.idm-tlkom.top/frtis
Submitted: Completed: publiccompleted
This website contacted 20 IPs in 6 countries across 11 domains to perform 22 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://enirvod.web.app/

Effective URL:
https://online-app-deqzgal1.idm-tlkom.top/frtis
Redirected

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Redirect chain from a phishing-reported .web.app subdomain to an unrelated expired/parked .top domain that shows a renewal notice and ad 'Related Searches'; no forms or malware, but treat as untrustworthy.

Risk Factors (4)
Cross-domain redirect from a .web.app tenant to an unrelated .top domain
Landing page is an expired-domain placeholder monetized with 'Related Searches' advertising links
Entry domain reported as phishing by a single unverified community source
.top destination domain is unranked and triggers IDS TLD-based hostility alerts
Domain age information unavailable

Details

Page Title

Page Redirectionother network

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'enirvod.web.app' is registered; it also runs on subdomain 'enirvod'. The core label 'web' covers 3 characters holding 1 vowel versus two consonants. Word splitting yields 1 word: web. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://enirvod.web.app/

Page Load Overview

2.23s
Total Load Time
298 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:62%
Script:Latin
Direction:ltr

Detection Details

Text Length:112 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software37% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
37%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1103.224.212.142Australia
AS133618Trellian Pty. Limited
154.192.35.101Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.218.186.77Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1100.22.72.236Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
1185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
118.173.205.108Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1185.111.111.155Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15.22.215.48Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
2220--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ACE2C41446F10421195B2025EEBE6EC537654A27758CEC087DCC6A80FF9E9B78EB6BF0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:1BZBsjBjrAyhtbgt4MiIO/5/9SLe2IbD7pV/rYxJanrYxJaXQJGG:5MM3eDzMbaUbaXi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33937:EBmkCLIbTIW4GJOiGIYSEB1AoTjbAgSiAIDBCJJCMrggkcCYUBMQJJIGEIUQRKQgISg7tUEzieICSBFgNxgOVCEGRUEMJaYS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c300000000ff
Perceptual Hash:a8609f4a9f4af345
Difference Hash:71969697b7b3b33b
Wavelet Hash:0042ffc75b1118ff
Color Hash:31007000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data