Security Scan: Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/992cee48-0f15-4e70-9a92-276e7dc26c6e Domain and IP registration (RDAP)/api/v1/rdap/992cee48-0f15-4e70-9a92-276e7dc26c6eHow often this domain was scanned/api/v1/domain/stats/security-auth-device.web.app Scan history for this domain/api/v1/domain/history/security-auth-device.web.app?limit=15

This website contacted 78 IPs in 4 countries across 49 domains to perform 292 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://security-auth-device.web.app/

Effective URL:

https://www.lloydsbank.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Free-hosting page matched an analyst-vetted UK bank/mobile 'account recovery' phishing kit with a CRITICAL hunting-rule hit and device-gated cloaking; it impersonates Lloyds Bank and redirects to the real bank as a lure.

Risk Factors (5)

Known malicious phishing kit identified by analyst-vetted roster (uk-mobile-recovery-ownerinfo-kit-2026-10)

CRITICAL hunting rule UK_Mobile_Recovery_OwnerInfo_Cloak_Kit fired on the page body

Lloyds Bank brand used on a non-Lloyds free-hosting subdomain (brand impersonation)

Device/country-gated cloaking — scanner and residential client were served different content

Account-recovery/billing-style lure name on a shared hosting subdomain of unknown creation date

Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Favicon Hash

MMH3: 1904351429

MD5: 84f5a48b677b6f5a36e3e359fc6373f7

Domain Name Analysis

You're looking at domain 'security-auth-device.web.app' on the application-focused generic top-level domain (.app) with subdomain 'security-auth-device'. The core label 'web' covers 3 characters holding 1 vowel versus 2 consonants. Breaking it apart gives one word: web. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.08s

Total Load Time

5.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:17 chars

Detector Agreement:0%

Website Classification

Primary Category

finance banking86% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking

86%

corporate business

34%

adult content

31%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
61	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	23.212.213.141Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
3	142.251.110.94Google · CDN	United States	AS15169Google LLC
3	142.250.154.94Google · CDN	United States	AS15169Google LLC
3	143.204.181.99Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	143.204.181.123Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
3	54.246.53.3Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
3	184.30.215.179Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
3	63.140.62.236Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	23.209.208.19Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
292	78	-	-