Security Scan Report: siwkk-a37dc.web.app

Redirected to:
https://ww17.drfelipenaranjo.com/SW/
Submitted: Oct 8, 2026, 7:59:31 PMCompleted: Oct 8, 2026, 8:01:13 PMpubliccompleted

This website contacted 24 IPs in 6 countries across 11 domains to perform 23 HTTP transactions. The main domain is ww17.drfelipenaranjo.com and was registered 35 years ago.

Submitted URL: https://siwkk-a37dc.web.app/

Effective URL:

https://ww17.drfelipenaranjo.com/SW/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Anonymous web.app tenant redirecting to an unrelated domain that serves a parked 'Related Searches' page with a mismatched title (kelkoogroup.net). No forms, no malware, no impersonation — low-grade SEO-spam/parking content, not a phishing page.

Risk Factors (5)
Cross-domain redirect from an anonymous web.app tenant to an unrelated registrable domain
Page title ('kelkoogroup.net') does not correspond to the final domain or its content
Parked-domain style 'Related Searches' monetization content scraped around dentistry keywords
Final domain not in Cisco Umbrella top 1M and of unknown creation date
Bot-protection script (datadome) and consent-manager/redirect chains on a page with no genuine service content
Safety Factors (5)
No forms of any kind: 0 password, 0 disguised-password, 0 payment fields
No credential exfiltration or cross-origin form submission detected
No JavaScript malware / YARA patterns, no native-YARA high-precision hits
No network IDS alerts and no known malicious kit in the kit roster
No impersonation of a distinct organisation's brand or login experience
Domain age information unavailable

Details

Page Title

kelkoogroup.netother network

Scan Type

public

Domain Name Analysis

The domain name 'siwkk-a37dc.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'siwkk-a37dc'. The registrable portion 'web' spans 3 characters containing one vowel alongside two consonants. Splitting it apart reveals 1 word: web. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://siwkk-a37dc.web.app/

Page Load Overview

44.82s
Total Load Time
316 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:72%
Script:Latin
Direction:ltr

Detection Details

Text Length:44 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2395.211.116.26Netherlands
AS60781LeaseWeb Netherlands B.V.
0199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
0103.224.182.242San Diego, California, United States
AS133618Trellian Pty. Limited
013.226.244.45Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
018.204.240.1Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
0103.224.182.220San Diego, California, United States
AS133618Trellian Pty. Limited
0207.154.244.157Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
0216.150.1.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0142.251.14.101Google · CDNUnited States
AS15169Google LLC
018.66.147.75Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2324--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D351EA7D8C364E3C8D1D1B98A4A8F1AC0703468675C58DD8B09F67BEDB951B16C4215C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:nXX8q05dtM3Dsp8K2fJmUH2csFFVR0eC+yyooxwyoirZbQPl5Nm1l9Mc35j+q:ncBq3gKfJFAFVRc+Jfoir+k3ac3Mq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2482:hAAIAACAAAhAcAAAQACAAAAAAQAAIAAgIAAAAIhAACAABKUEGBAAAQAAQCAAREBAACAAgEjIAQCBUAgAAAkAgEgAgIAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefee6e6e6e6fefe
Perceptual Hash:f5338ccc33332acc
Difference Hash:00000c0c0c0c0000
Wavelet Hash:02023a22e6fef2f2
Color Hash:#d22d51

Other Hashes

Crop Resistant:00000c0c0c0c0000

Scan History

Scan history not available

Unable to load historical scan data