Security Scan Report: finlesuvr.web.app

Redirected to:
https://search.aipages.dev/en?idm-tlkom.top
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 3 countries across 8 domains to perform 17 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://finlesuvr.web.app/

Effective URL:
https://search.aipages.dev/en?idm-tlkom.top
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Redirect chain to a .top domain landing on a password-verification gate with a disguised password field, unicode evasion and DevTools blocking — a credential-harvesting phishing page.

Risk Factors (7)
Disguised password field (type=text with password placeholder) with no username field
Unicode confusion/evasion in form fields
JavaScript blocks DevTools and view-source
Redirect to a suspicious .top domain hosting the credential gate
Bot-protection/challenge content mismatch between scanner and real client
Single-source phishing threat-intel report on the entry domain
HIGH IDS alerts for DNS/HTTP traffic to a *.top domain
Domain age information unavailable

Details

Page Title

Page Redirection

Scan Type

public

Domain Name Analysis

Domain 'finlesuvr.web.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'finlesuvr'. The registrable portion 'web' spans 3 characters containing one vowel alongside two consonants. Breaking it apart gives 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://finlesuvr.web.app/

Page Load Overview

5.19s
Total Load Time
323 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:71 chars
Detector Agreement:100%
Language mismatch: Declared as en-US but detected as fr

Website Classification

Primary Category

social media network60% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network
60%
news media journalism
54%
government public service
44%
technology software
43%
adult content
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1172.67.206.83Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.196.251Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.169.95.124Singapore
143.174.247.36Singapore
1183.240.98.228China
AS56040China Mobile communications corporation
1104.21.15.148Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.36.163Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
114.215.183.79China
AS4134Chinanet
179--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15DF020CB49E160915060610046D2F418A9420CFF96488838FA4C20D81F5A7A8A44BB58

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hxzMMxCrnqJmr2xHuC9tVVjX3EdZ7XxhuNAczPxdXIgn2Hf8:hxzMMxCr8aytTjkbvMDB2k

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:572:QAAAAAAAAAAAAAAACAAIAAAAAAAAAAAAAAAAAAEQAAAAAAAAAgAAAAAAEAAAgEAAAAAAAgAAAIAAAAAAAAAAAAAAABQAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01091f1b1f1f1f0f
Perceptual Hash:8c1d337666cc9933
Difference Hash:fff3b3b3f3b3f3ff
Wavelet Hash:01191b1b1f1f1f1f
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data