Security Report: sbb-f96a3.web.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c042d0aa-5e2b-4e3c-b47e-94fd5948650e Domain and IP registration (RDAP)/api/v1/rdap/c042d0aa-5e2b-4e3c-b47e-94fd5948650eHow often this domain was scanned/api/v1/domain/stats/sbb-f96a3.web.app Scan history for this domain/api/v1/domain/history/sbb-f96a3.web.app?limit=15

This website contacted 4 IPs in 2 countries across 6 domains to perform 54 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://sbb-f96a3.web.app/

AI Security Verdict

Moderate Risk

Confidence: 72%

Risk Score

The page title impersonates SBB on a non-SBB web.app subdomain, but visible content is an unrelated 404/Allied RMC placeholder with no credential or payment forms and no threat-intel hits.

Risk Factors (3)

Claims to be an SBB online portal while hosted on a non-SBB web.app subdomain.

Page title and content are mismatched: SBB branding in the title but visible content is an unrelated Allied RMC 'Not Found' page.

Impersonation of a different entity's brand without an official domain.

Safety Factors (3)

No credential or payment forms detected.

No Indicators of Compromise, YARA malware matches, IDS alerts, or malicious JavaScript behavior detected.

No cross-origin credential exfiltration detected.

Domain age information unavailable

Details

Page Title

SBB | Das Online-Portal der SBB für Zug und ÖV

Scan Type

public

Favicon Hash

MMH3: -821463294

MD5: 9e0d0b7ac8de1085c313c14db25d2c95

Domain Name Analysis

The domain 'sbb-f96a3.web.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'sbb-f96a3'. Its registrable label 'web' stretches across 3 characters holding 1 vowel versus two consonants. Word splitting yields one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.36s

Total Load Time

1020 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:60%

Script:Latin

Direction:ltr

Detection Details

Text Length:46 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content36% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content

36%

government public service

33%

documentation technical

28%

corporate business

28%

real estate property

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
13	157.90.129.36	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
13	142.251.14.95Google · CDN	United States	AS15169Google LLC
13	192.178.183.94Google · CDN	United States	AS15169Google LLC
54	4	-	-