Security Scan Report: mail2update-c386.web.app

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 19 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://mail2update-c386.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Roundcube Webmail login on a free .web.app subdomain that posts entered usernames and passwords to an external liveformhq.com collector; corroborated phishing threat intel. Do not enter credentials.

Risk Factors (4)
Phishing threat-intel match on the primary domain corroborated by two independent feeds
Brand impersonation of Roundcube Webmail on an unrelated free hosting subdomain
Password/username form submitted cross-origin to liveformhq.com (credential exfiltration to a third-party collector)
Unranked domain on shared hosting with unknown page-level age
Domain age information unavailable

Details

Page Title

Roundcube Webmail :: Welcome to Roundcube Webmail

Scan Type

public

Domain Name Analysis

You're looking at domain 'mail2update-c386.web.app' on the application-focused generic top-level domain (.app) and includes subdomain 'mail2update-c386'. The core label 'web' covers 3 characters containing one vowel alongside 2 consonants. Tokenizing the label suggests one word: web. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

& | Username @ | Password Roundcube Webmail

Page Load Overview

1.17s
Total Load Time
403 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:238 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical45% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
45%
phishing scam
42%
technology software
42%
news media journalism
36%
adult content
36%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
191--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T120E1C6562C188F3B017209D8B8DAFA895CFD412BE610A858B5FC816D1F91F9905F3BB5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:emR9TLU6KJoFoYwNDGFAZxY7TJg79tUCN:zTLbEoFoYw1NxY71g7N

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7018:ECpNIAAHJQEruBDCBAgXQACgBAEBJ4SDOIMiS2WnpgUSBoAAohbwTJAsA4RAAZYWWIIxhAUkAARcimAgjmoCElABhAEQJgBB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7ffffffff
Perceptual Hash:b3338ccccc339999
Difference Hash:00080c0c00000000
Wavelet Hash:fce4e4e400000000
Color Hash:N/A

Other Hashes

Crop Resistant:00080c0c00000000

Scan History

Scan history not available

Unable to load historical scan data