Security Scan Report: marv-iceberg.web.app

Redirected to:
https://broxel.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 72 IPs in 3 countries across 38 domains to perform 222 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://marv-iceberg.web.app/

Effective URL:
https://broxel.com/
Redirected

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Free web.app subdomain reported as phishing that redirects to the genuine Broxel bank site, with bot-blocking hiding it from scanners. No credential form here, but the redirector is untrusted — avoid entering data via this link.

Risk Factors (4)
Primary domain reported as phishing (single-source, unverified community submission)
Free hosting-platform subdomain used purely as a cross-domain redirect to a banking brand
Bot protection / challenge shown to datacenter scanners but not residential clients, obscuring the redirector from automated review
Unverifiable creation date for the web.app subdomain — could have been registered recently for this redirect
Domain age information unavailable

Details

Page Title

Redirection Page

Scan Type

public

Domain Name Analysis

The domain 'marv-iceberg.web.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'marv-iceberg'. The registrable portion 'web' spans 3 characters split between one vowel and 2 consonants. Word splitting yields one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://marv-iceberg.web.app/

Page Load Overview

3.64s
Total Load Time
7.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:16 chars
Detector Agreement:0%

Website Classification

Primary Category

cryptocurrency blockchain94% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
94%
finance banking
90%
adult content
87%
technology software
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
334.8.48.2Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
334.120.31.228Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
318.173.205.120Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3104.19.148.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
32.21.20.133Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3104.17.201.65Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22272--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11A116DCB28E35001297254599ED6B20C39B350AF548D98807ADDDB981FD476B81B3ACC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hRjy7E8aS33qS4ACtTrcyqhIOxHFwK1IhXBRcygoxH/Lkb8dMLuexHAeSp4Nbx4D:hRjCpHKpnlrevJbn617p4NO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:855:AEAAAAAAAAAAAAAIAAAAAAAAAAAAAAEAAAAEAAAAAAAAAAABAAAAEAAAAAAhAAAAAIAAAAASgCEAAAAAAAgQAAAAEIAAAgAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:d3fbc991e38397ff
Perceptual Hash:ec49c366c73c30e3
Difference Hash:062333332a262600
Wavelet Hash:c0f98193c38383ff
Color Hash:07600000080

Other Hashes

Crop Resistant:062333332a262600

Scan History

Scan history not available

Unable to load historical scan data