Security Scan: Hushmail Email Migration Tool

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bc508f82-f220-4774-8b7c-88e5aeba2762 Domain and IP registration (RDAP)/api/v1/rdap/bc508f82-f220-4774-8b7c-88e5aeba2762How often this domain was scanned/api/v1/domain/stats/hushmail.web.app Scan history for this domain/api/v1/domain/history/hushmail.web.app?limit=15

This website contacted 6 IPs in 1 country across 3 domains to perform 20 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://hushmail.web.app/

Effective URL:

https://secure.hushmail.com/authentication/?next_webapp_name=email_mig...

Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

Risk Score

Real content is Hushmail's own migration tool served on secure.hushmail.com after a redirect from a Firebase subdomain flagged once (unverified). No exfiltration or brand misuse found; residual doubt is the unvetted entry host.

Risk Factors (3)

Brand-named subdomain (hushmail.web.app) published on a shared Firebase hosting namespace with an unknown creation date — the platform apex's age says nothing about this tenant

Single-source, unverified phishing report against the entry domain hushmail.web.app

Entry domain is not in Cisco Umbrella top 1M and the redirect crosses onto a different registrable domain, so the landing site's reputation cannot be confirmed from the entry host

Safety Factors (5)

Final URL is secure.hushmail.com, the actual Hushmail (Hush Communications Canada Inc.) domain, so no brand is being worn on a mismatched domain

Credential collection occurs on the official brand domain via a legitimate SSO flow, with no cross-origin credential exfiltration detected

Import is attributed to ShuttleCloud, a real third-party mailbox migration provider, with Terms of Use and Privacy Policy links

No hunting rule malware patterns, no native-hunting rule high-precision hits, no Suricata alerts, no known-kit roster match

Domain age information unavailable

Details

Page Title

Hushmail Email Migration Tool

Scan Type

public

Favicon Hash

MMH3: 385029818

MD5: df18f81efd93e2dbebf3d38326acf132

Domain Name Analysis

Domain 'hushmail.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'hushmail'. The second-level label 'web' is 3 characters long holding one vowel versus two consonants. Segmentation suggests one word: web. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.53s

Total Load Time

243 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:493 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism44% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism

44%

phishing scam

38%

healthcare medical

33%

government public service

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	35.211.208.37Google · CDN	North Charleston, South Carolina, United States	AS15169Google LLC
3	172.65.90.4Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.65.90.7Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.65.90.6Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.65.90.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
20	6	-	-