Security Scan: https://quickbookwtw4.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c1c473b3-70c7-4226-9988-326c5a22480d Domain and IP registration (RDAP)/api/v1/rdap/c1c473b3-70c7-4226-9988-326c5a22480dHow often this domain was scanned/api/v1/domain/stats/quickbookwtw4.web.app Scan history for this domain/api/v1/domain/history/quickbookwtw4.web.app?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://quickbookwtw4.web.app/

Effective URL:

https://sscdesk01-sprt03.sbs/us.php

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

QuickBooks-typosquat web.app page silently redirects to an unrelated .sbs PHP endpoint that the ML classifier flags as phishing; no credential form was captured only because the destination is currently returning 502.

Risk Factors (5)

QuickBooks-typosquat subdomain used purely as a redirector

Cross-domain redirect to an unrelated, unranked .sbs domain

ML content classifier flags phishing scam (67%)

Final destination is a bare PHP endpoint on a throwaway TLD

No forms, no content, no business purpose — redirect-only infrastructure

Safety Factors (5)

No credential, password or payment form was present in the captured DOM (all form counts = 0)

No Indicators of Compromise matched the page or its resources

No JavaScript malware (hunting rule) patterns, no obfuscated JS, no cross-origin credential exfiltration

No network IDS alerts and no Google Safe Browsing / kit-roster hits

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 7 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'quickbookwtw4.web.app' on the application-focused generic top-level domain (.app) and includes subdomain 'quickbookwtw4'. Count 3 characters in 'web' holding 1 vowel versus two consonants. Splitting it apart reveals 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page did not load

The browser never reached this site, so there is no screenshot of it.

Page Load Overview

1.03s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: quickbookwtw4.web.app