Security Scan Report: qtrlkh.web.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 4 domains to perform 13 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://qtrlkh.web.app/

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Title claims OWA login on a random web.app subdomain, but the captured page only shows a reCAPTCHA gate with no credential form; suspicious brand impersonation, not confirmed phishing.

Risk Factors (3)
Uses an OWA-style login title on a non-official, randomly named hosting subdomain.
Brand impersonation suspicion without visible official Microsoft branding or disclosure.
Captcha-only gate with no legitimate page content beyond robot verification.
Safety Factors (5)
No credential, password, or payment form was captured in the DOM.
No threat-intelligence Indicators of Compromise matches were reported.
No hunting rule JavaScript malware patterns were detected.
No network IDS alerts were detected.
No cross-origin credential exfiltration or suspicious JavaScript behavior was detected.
Domain age information unavailable

Details

Page Title

OWA Login

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'qtrlkh.web.app' is registered with subdomain 'qtrlkh'. Its registrable label 'web' stretches across 3 characters split between one vowel and 2 consonants. It segments into 1 word: web. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Please verify you are not a robot mm I'm not a robot reCAPTCHA

Page Load Overview

2.47s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:70%
Script:Latin
Direction:ltr

Detection Details

Text Length:43 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content72% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
72%
government public service
61%
healthcare medical
61%
news media journalism
55%
documentation technical
55%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2142.251.153.119Google · CDNUnited States
AS15169Google LLC
2142.251.127.94Google · CDNUnited States
AS15169Google LLC
2142.251.152.119Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2142.251.150.119Google · CDNUnited States
AS15169Google LLC
136--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E881C77216A00864C81387A4BA51B749A433B22FFCC5C99878ED9B2077CD8F7C9572B4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:FJ+CL42Cx2A6sjqjXxm3OBILhYy11rZfXHhFSuy/Zs4hvCTvNof2RXovxm3NOZ4j:Cr2A6XELOyndHH6+7j

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3876:AAAIQgQAEQBAAAAAQIAAQgEYAmAqKRAAAgCQAoAEgAYAQUMFgYAIADAqATAOCkgAEYCBAAACBAAAEIQIACIAgAAAAAAQAQYA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7ffffffffffff
Perceptual Hash:e666666666662633
Difference Hash:0c08000000000000
Wavelet Hash:e7e7ffff00000000
Color Hash:07001000180

Other Hashes

Crop Resistant:0c08000000000000

Scan History

Scan history not available

Unable to load historical scan data