Security Scan Report: fairplifnciaezrds.web.app

Redirected to:
https://accessing-delogin.lolipo.shop/auth/index.html
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 4 domains to perform 7 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://fairplifnciaezrds.web.app/

Effective URL:
https://accessing-delogin.lolipo.shop/auth/index.html
Redirected

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Free-hosting throwaway subdomain that only redirects visitors to an unrelated '.shop' domain at an 'accessing-delogin/auth' path — a classic phishing-redirect chain, corroborated by an IDS phishing-redirect alert. No form was captured on this hop.

Risk Factors (5)
Randomised, disposable-looking subdomain on a shared hosting platform used solely as a redirector
Cross-domain redirect from web.app to an unrelated .shop domain with an /auth/ path
Host label and path ('accessing-delogin' + /auth/index.html) imitate a sign-in page without any matching brand
Different content served to the datacenter scanner than to a residential client (block page vs. real page)
Network IDS phishing-redirect alert corroborating the redirect chain
Domain age information unavailable

Details

Page Title

Page Redirectionother network

Scan Type

public

Domain Name Analysis

The domain name 'fairplifnciaezrds.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'fairplifnciaezrds'. The registrable portion 'web' spans 3 characters containing 1 vowel alongside two consonants. Breaking it apart gives 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fairplifnciaezrds.web.app/

Page Load Overview

0.62s
Total Load Time
15 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Text Length:84 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism38% confidence
Type: static
Method: ml+structural

All Detected Categories

news media journalism
38%
government public service
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.196.131Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.124.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.197.131Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.123.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
77--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FDF0D4EF1640309350917149DDC6F54CEDDBC4E86194CD38DCC1A54D1E18339B467791

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:haxVFkM84ASHxHwR82EaMXz7XxhuTpWF98qo88:haHFkMPtG7EVXvMWP8qQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:6e202ed55686204624ee377de0d51039

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:8f0f0f0f0f0f0f07
Difference Hash:6000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:#6653ac

Other Hashes

Crop Resistant:6000000000000000

Scan History

Scan history not available

Unable to load historical scan data