Security Scan: Hushmail Email Migration Tool

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d815ab09-c173-414e-824d-754b9207b926 Domain and IP registration (RDAP)/api/v1/rdap/d815ab09-c173-414e-824d-754b9207b926How often this domain was scanned/api/v1/domain/stats/hushmail.web.app Scan history for this domain/api/v1/domain/history/hushmail.web.app?limit=15

This website contacted 4 IPs in 1 country across 3 domains to perform 20 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://hushmail.web.app/

Effective URL:

https://secure.hushmail.com/authentication/?next_webapp_name=email_mig...

Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

Risk Score

Content is Hushmail's real migration tool on secure.hushmail.com with a legitimate same-brand login. Caution only because the entry host hushmail.web.app uses Hushmail's name on free hosting and has one unverified phishing report.

Risk Factors (3)

Unverified single-source phishing report against the entry host hushmail.web.app (weighted cautiously, no corroboration)

Hushmail brand name published on a free/shared hosting subdomain (.web.app) whose actual creation date is unknown — a common squatting/phishing setup pattern

Bot-protection challenge shown to the datacenter scanner while real content was served to a residential client (common on legitimate sites; noted, not scored as evasion)

Safety Factors (5)

Final content is served from secure.hushmail.com, the official Hushmail domain, not from the web.app subdomain

Login form targets the same organisation's authentication endpoint (legitimate SSO flow), no credential exfiltration detected

Page presents its own brand (Hushmail) on Hushmail infrastructure and names the operating company, Hush Communications Canada Inc.

Third-party migration provider (ShuttleCloud) is disclosed with linked Terms of Use and Privacy Policy

No malware hunting-rule matches, no known malicious kit roster hits, no network IDS alerts, all scripts same-origin

Domain age information unavailable

Details

Page Title

Hushmail Email Migration Tool

Scan Type

public

Favicon Hash

MMH3: 385029818

MD5: df18f81efd93e2dbebf3d38326acf132

Domain Name Analysis

Domain 'hushmail.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'hushmail'. The core label 'web' covers 3 characters containing one vowel alongside two consonants. Segmentation suggests 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Hushmail(@®) What email account do you want to migrate from? Choose your old provider: M Gmail || GH Outlook || y! Yahoo || + Other We will copy all your messages from this account, but we will no...

Page Load Overview

0.57s

Total Load Time

243 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:493 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism44% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism

44%

phishing scam

38%

healthcare medical

33%

government public service

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	172.65.90.7Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.65.90.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	35.211.208.37Google · CDN	North Charleston, South Carolina, United States	AS15169Google LLC
20	4	-	-