ScanMalware.com

Security Scan Report: io-web-ec451.web.app

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d8215e81-bab3-4108-b7c1-036e2cc30107Domain and IP registration (RDAP)/api/v1/rdap/d8215e81-bab3-4108-b7c1-036e2cc30107How often this domain was scanned/api/v1/domain/stats/io-web-ec451.web.appScan history for this domain/api/v1/domain/history/io-web-ec451.web.app?limit=15
This website contacted 1 IP in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://io-web-ec451.web.app/

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Metadata claims IONOS webmail login on a non-IONOS Firebase subdomain, but no credential or payment form was found; moderate risk of brand impersonation or an unfinished phishing page.

Risk Factors (3)
Metadata claims IONOS webmail login on a non-IONOS domain
Page title and metadata are inconsistent with each other
Hosted on a free/shared subdomain with unknown page creation date
Safety Factors (6)
No credential or payment forms detected
No password, disguised-password, or payment fields present
No threat-intelligence Indicators of Compromise matches
No hunting rule malware, IDS, JavaScript behavioral, or credential-exfiltration signals
No cross-origin form submissions or credential exfiltration detected
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5
Domain age information unavailable

Details

Page Title

Sample Background

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'io-web-ec451.web.app' is registered with subdomain 'io-web-ec451'. Count 3 characters in 'web' holding 1 vowel versus 2 consonants. Tokenizing the label suggests 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://io-web-ec451.web.app/

Page Load Overview

0.29s
Total Load Time
10 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:17 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
91--

Detected Technologies4

X-UA-Compatible
100%
HTTP/3
40%
HSTS
40%
Firebase
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15503F9268D467DC157A0BF93F1EDA9CD1A2DE3DD68820058867AAE84C50DFAC31C62DC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:oSHqz7FrHmdlr4tSRF654bDnPYi+fDCUeQ5v1FlCVVXcDjhSpqxgVLC:Wdh4PPYBBCVuDWA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:38712:BhI7aAAVPAdAERwWIoKPAxQdUOCQIGvBBEggQpAAKcEYPcJKEABeWkBQiQkogCEAOqAJzyCHHg4wdvAACngAwCI4IEQAfwMQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data