Security Scan Report: verifiepost.web.app

Redirected to:
https://fr.klar-transparent-verhal.online/?pwd=biongtdf
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://verifiepost.web.app/

Effective URL:
https://fr.klar-transparent-verhal.online/?pwd=biongtdf
Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

Free web.app subdomain redirects to an unrelated .online host carrying a '?pwd=' token, then dies with a 502. No forms or malware found, but the unverifiable cross-domain redirect chain with a phishing-redirect IDS alert warrants avoidance.

Risk Factors (5)
Cross-domain redirect from a free hosting subdomain to an unrelated .online domain
Phishing-redirect heuristic alert from network IDS (informational, uncorroborated)
URL contains an opaque '?pwd=' parameter suggesting a per-victim lure token
Final landing page unreachable (502), so delivered content could not be verified
Subdomain name 'verifiepost' evokes a verification/postal-delivery lure style; platform subdomain age is unknown
Safety Factors (5)
No credential, login or payment forms on the captured page (0 forms, 0 password fields, 0 payment fields)
No threat-intelligence Indicators of Compromise against the page or its resources
No YARA JavaScript malware patterns, no known malicious kit roster match, no obfuscated/exfiltrating scripts
No cross-origin credential exfiltration and no third-party script hosts
No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

Domain 'verifiepost.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'verifiepost'. Its registrable label 'web' stretches across 3 characters holding 1 vowel versus 2 consonants. Word splitting yields one word: web. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://verifiepost.web.app/

Page Load Overview

0.33s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Text Length:84 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism38% confidence
Type: static
Method: ml+structural

All Detected Categories

news media journalism
38%
government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
31--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B8F0A3FF7E00306201416249D5C6F01DEDD7DCE9B4D98474D8D266451E1832AB567B93

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:AAkM8wHxHAMCSsH5aMXz7XxhuPqWFoAho8n:AAkMVr7sZVXvtW7hz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:215da6e99c9298c53ca73df0dfcd33e1

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:870707070f0f1f3f
Difference Hash:c000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:#e06c6c

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data