ScanMalware.com

Security Scan Report: waitingpackageco.web.app

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/903cb8a0-5ada-44b6-9af0-d56159bd2947Domain and IP registration (RDAP)/api/v1/rdap/903cb8a0-5ada-44b6-9af0-d56159bd2947How often this domain was scanned/api/v1/domain/stats/waitingpackageco.web.appScan history for this domain/api/v1/domain/history/waitingpackageco.web.app?limit=15
This website contacted 5 IPs in 1 country across 4 domains to perform 9 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://waitingpackageco.web.app/

AI Security Verdict

High Risk

Confidence: 74%

7
Risk Score

Contentless 'human verification' gate on an anonymous free-hosting subdomain, with an invalid reCAPTCHA key and a single-source phishing report on its own domain. Consistent with a cloaked phishing lure; do not click Continue or enter any data.

Risk Factors (4)
Phishing threat-intelligence report on the primary domain of the scanned page
Human-verification interstitial with an invalid reCAPTCHA site key — a cloaking/gating pattern, not a functioning security check
Anonymous free-hosting subdomain with unknown page creation date
Unranked domain delivering a 'waiting package' themed name with zero supporting content
Domain age information unavailable

Details

Page Title

Verification

Scan Type

public

Domain Name Analysis

The domain 'waitingpackageco.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'waitingpackageco'. The core label 'web' covers 3 characters containing one vowel alongside 2 consonants. Word splitting yields one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://waitingpackageco.web.app/

Page Load Overview

1.47s
Total Load Time
797 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:76 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical57% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
57%
news media journalism
41%
government public service
40%
adult content
27%
finance banking
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1142.251.150.119Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1142.251.157.119Google · CDNUnited States
AS15169Google LLC
1142.251.110.94Google · CDNUnited States
AS15169Google LLC
95--

Detected Technologies6

Cloudflare
50%
reCAPTCHA
45%
HTTP/3
40%
HSTS
40%
Firebase
40%
Cloudflare Turnstile
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D351D7B325D404152D2787B5A5F1B6C67822C20BF580E1E1BCA856A4BFC4DA3C45715C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nXJ+CKzrl8TfQpZcqgjKX8C7BmYYdshOj8xm3OZaFhYy11rZjnOzV:nkpzrmTfQLwf4OoaFOynlOp

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3100:1AQRQEAAAAAECQACTAABAAAgLCAAAQAASgQBAIQCAggQRAsCIAEIAAAAQEAQgEWAAKD4AAAAAKgJIoiQhAAACAIADBAAAgYg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:080c180000000000
Perceptual Hash:999933666ccccccc
Difference Hash:105a320000000000
Wavelet Hash:d8c8d8c0f0f0f0f0
Color Hash:#931f31

Other Hashes

Crop Resistant:105a320000000000

Scan History

Scan history not available

Unable to load historical scan data