Security Scan: MochiCat Web Service

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/de6f29fb-29c4-4ad4-ab34-2461291682f5 Domain and IP registration (RDAP)/api/v1/rdap/de6f29fb-29c4-4ad4-ab34-2461291682f5How often this domain was scanned/api/v1/domain/stats/mochicatcollection.web.app Scan history for this domain/api/v1/domain/history/mochicatcollection.web.app?limit=15

This website contacted 7 IPs in 1 country across 4 domains to perform 15 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://mochicatcollection.web.app/

Effective URL:

https://mochicatcollection.web.app/#/

Redirected

AI Security Verdict

Low Risk

Confidence: 60%

Risk Score

Self-branded Flutter login app on Firebase Hosting with no threat-intel, YARA or IDS hits and no brand impersonation; unranked, unknown-age subdomain, so avoid reusing real passwords.

Risk Factors (2)

Login/signup screen collects an email and password on a free shared-hosting subdomain whose true creation date is unknown, and the submission endpoint cannot be verified from the DOM.

Default Flutter template metadata ('A new Flutter project.') indicates an unfinished project rather than a documented, operating service.

Safety Factors (4)

No impersonation of any third-party brand — the page name matches its own domain (self-branding).

No credential exfiltration, no cross-origin form submissions, and no obfuscated or malicious JavaScript detected.

No threat-intelligence matches, no JavaScript malware patterns, no native-YARA hits, and no network IDS alerts.

Only conventional third-party resources loaded (Google Fonts/Gstatic, unpkg, a Skia CanvasKit WebAssembly module).

Domain age information unavailable

Details

Page Title

MochiCat Web Service

Scan Type

public

Favicon Hash

MMH3: -1398218733

MD5: 5dcef449791fa27946b3d35ad8803796

Domain Name Analysis

The domain 'mochicatcollection.web.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'mochicatcollection'. The core label 'web' covers 3 characters holding one vowel versus two consonants. It segments into 1 word: web. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.94s

Total Load Time

4.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:100%

Script:Latin

Direction:ltr

Detection Details

Text Length:20 chars

Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	142.251.154.120Google · CDN	United States	AS15169Google LLC
2	104.18.0.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.20.94Google · CDN	United States	AS15169Google LLC
2	142.251.155.120Google · CDN	United States	AS15169Google LLC
2	142.251.152.120Google · CDN	United States	AS15169Google LLC
2	104.18.1.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	7	-	-