Security Scan: Authentication

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8f8a8890-77cd-42a6-8628-1d70502afa09 Domain and IP registration (RDAP)/api/v1/rdap/8f8a8890-77cd-42a6-8628-1d70502afa09How often this domain was scanned/api/v1/domain/stats/sportsbg-f9609.web.app Scan history for this domain/api/v1/domain/history/sportsbg-f9609.web.app?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://sportsbg-f9609.web.app/

AI Security Verdict

High Risk

Confidence: 72%

Risk Score

Single-source phishing report on the primary domain plus an unidentified 'Permission Check' email form with hidden fingerprint on a free .web.app subdomain; no password fields, but evidence supports high risk.

Risk Factors (3)

Single-source phishing threat-intelligence match on the primary domain

Free hosting subdomain with unknown actual creation date and no attributable reputation

Suspicious generic authentication/permission-check form collecting email and browser fingerprint without clear site identity

Domain age information unavailable

Details

Page Title

Authentication

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'sportsbg-f9609.web.app' is registered; it also runs on subdomain 'sportsbg-f9609'. The registrable portion 'web' spans 3 characters split between one vowel and 2 consonants. It segments into 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Permission Check Authenticate, ‘Your connection is secure and encrypted.

Page Load Overview

0.59s

Total Load Time

7 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:85 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service45% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service

45%

documentation technical

44%

healthcare medical

36%

news media journalism

30%

technology software

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.26.10.233Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	2	-	-

Detected Technologies3

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A361B58BE5A30862BD23526467E753043634C40B5A88CD6D3E9CB7A8DF8468589FB7CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nBRzqDI99NF12UnrFCRRT61mi1YMYb7/ZJXPp8ft0/4zChfk6Bg1VlL8e:nBRuqnsUnrFSRTGY/7zXPp3/Lk6klL8e

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3229:AABIAMMoJRABQEAAAgQaAQACAIQKgAGABEYABAoFAABgAoAACAAACQYJAMABAQoAAEkgAABAEAEQcAiGUUggAoLAAAQIIAIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff

Perceptual Hash:e6cc993366cc9c32

Difference Hash:0008000c4d000800

Wavelet Hash:3c3c3c2407073f3f

Color Hash:070000001c0

Other Hashes

Crop Resistant:0008000c4d000800

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: sportsbg-f9609.web.app