Security Scan Report: toll-0f9f.web.app

Redirected to:
https://www.northseastudio.dk/wp-admin/-/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 7 domains to perform 134 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://toll-0f9f.web.app/

Effective URL:
https://www.northseastudio.dk/wp-admin/-/
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Unexplained redirect from a free web.app subdomain lands on a photographer's benign WordPress 404 page with only a search form; no credential/payment collection, no threat-intel or malware signals.

Risk Factors (1)
Anonymous hosting-platform subdomain (toll-0f9f.web.app) with unknown creation date redirecting into another domain's WordPress admin path — unusual routing, but the destination serves only a benign 404 page
Safety Factors (4)
No credential, password or payment forms on the served page
No Indicators of Compromise, YARA malware, IDS alerts or Safe Browsing hits
Self-branded page matching its own domain; contact details consistent with the business
Redirect landing on a 404 not-found page rather than a data-collection page
Domain age information unavailable

Details

Page Title

Page not found – NorthSeaStudio | Models on visit – v/ Erik Sahl freelance photographerother network

Scan Type

public

Domain Name Analysis

The domain name 'toll-0f9f.web.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'toll-0f9f'. The second-level label 'web' is 3 characters long containing one vowel alongside 2 consonants. It segments into 1 word: web. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://toll-0f9f.web.app/

Page Load Overview

3.75s
Total Load Time
604 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:795 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service77% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
77%
documentation technical
59%
social media network
43%
blog personal website
39%
technology software
37%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24195.43.138.26Denmark
AS59979Klein-Data
22199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
22104.20.23.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22142.251.110.95Google · CDNUnited States
AS15169Google LLC
22142.251.14.94Google · CDNUnited States
AS15169Google LLC
22172.66.169.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1346--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16453A7B35469C00F274986DCF054B314D29AED15CB43DA7EBCF8211AA3F6FE811AA719

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:h93Piyp2cuKdR+epQ+e00+ei1U4fMMTWQUUhiSBZZxcffJ+gNvvaofAV2EcYorX2:hhb8cuKdRrQO0A11MMTWQUUhiSBZZxcw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:63981:oOAAMOdCoYEH4igCwEi0IgBIIKsgIB4CATehMwcZGFEIICAgCBjIFkJMTQBbAAgdREINVA68BcDBCGTOhcIDD8G5hagIIEkI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c14161c141c10101
Perceptual Hash:eae0baf0b8d0e08f
Difference Hash:8181c18181852501
Wavelet Hash:ff01f3f301d50101
Color Hash:#8479d2

Other Hashes

Crop Resistant:8181c18181852501

Scan History

Scan history not available

Unable to load historical scan data