Security Scan Report: kindlymail-3bb52.web.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 27 IPs in 1 country across 14 domains to perform 32 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://kindlymail-3bb52.web.app/

AI Security Verdict

High Risk

Confidence: 55%

7
Risk Score

Full PicPack-style photo-sharing landing page on an unrelated Firebase subdomain. No threat-intel, hunting rule or exfiltration signals, but an orphan disguised password field and brand/host mismatch warrant caution; no evidence of credential theft was observed.

Risk Factors (3)
Credential-style input present as an orphan/disguised password field with no accompanying username field, on a shared hosting-platform subdomain
Brand 'PicPack' presented on a subdomain (kindlymail-3bb52.web.app) with no name relationship to the brand
Scanner-reported character-confusion/unicode anomaly in form fields
Domain age information unavailable

Details

Page Title

Collect photos and videos and share with your group

Scan Type

public

Domain Name Analysis

The domain 'kindlymail-3bb52.web.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'kindlymail-3bb52'. The registrable portion 'web' spans 3 characters with 1 vowel and two consonants. Word splitting yields one word: web. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

picpack Articles About = FAQ_—sPricing Signin Easily collect photos and videos from a group Perfect for sharing wedding photos, No apps or signups required for your group. $x; Createa PicPack} ¥...

Page Load Overview

3.12s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,348 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
62%
entertainment media
55%
adult content
38%
download file sharing
36%
documentation technical
34%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1142.251.20.97Google · CDNUnited States
AS15169Google LLC
1216.239.32.36Google · CDNUnited States
AS15169Google LLC
1142.251.154.119Google · CDNUnited States
AS15169Google LLC
1142.251.14.149Google · CDNUnited States
AS15169Google LLC
1216.239.34.36Google · CDNUnited States
AS15169Google LLC
1142.251.127.157Google · CDNUnited States
AS15169Google LLC
1142.251.20.94Google · CDNUnited States
AS15169Google LLC
3227--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1258241113315226A42F7C5D0F9A1FF94B0A9E30FDF9E806469F8514C9FE3D60A672A71

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:wl5xJFaxAWn81RDAVzCz4OQSYFQneJcOGu0:4L8SDAVEheaz/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18187:TwsRkkABlIQiChEAEyEBYNNMUwSEnM8KYQvsIDgCQwtA4RQQyhCkFUJIICLwFQTJIJliQdQDfIZHIiyJAKAJzzAKCaZEAiCm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff3c3f30c0000ff
Perceptual Hash:eced9292926c6d13
Difference Hash:988686a6a9aa8f49
Wavelet Hash:ffd3d3f3000000ff
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data