Security Scan: https://fix-3rivers-fcu-live-e22b8.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/074e006f-42d1-48a4-b33a-bf4d8d7296cb Domain and IP registration (RDAP)/api/v1/rdap/074e006f-42d1-48a4-b33a-bf4d8d7296cbHow often this domain was scanned/api/v1/domain/stats/fix-3rivers-fcu-live-e22b8.web.app Scan history for this domain/api/v1/domain/history/fix-3rivers-fcu-live-e22b8.web.app?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://fix-3rivers-fcu-live-e22b8.web.app/

Effective URL:

https://digital3riverslogin.icu/cancel

Redirected

AI Security Verdict

Moderate Risk

Confidence: 82%

Risk Score

Disposable Firebase subdomain carrying a credit union's name redirects to 'digital3riverslogin.icu'; no legitimate reason exists for this chain and it fits brand-impersonation phishing, though no form was observed on the captured page.

Risk Factors (4)

Deceptive hostname using a financial institution's brand ('3rivers-fcu') on a non-official domain

Redirect from a disposable Firebase subdomain to a 'brand+login' .icu domain

Use of a free instant-hosting subdomain consistent with rapid, throwaway phishing deployment

No on-page content, branding or business identity to justify the brand name in the URL

Safety Factors (5)

No credential, password or payment fields were present on the page that was captured

No threat-intelligence match, hunting-rule hit, or network IDS alert on the recorded content

The 502 error text is the scanning proxy's own page, not evidence about the destination site

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'fix-3rivers-fcu-live-e22b8.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'fix-3rivers-fcu-live-e22b8'. The second-level label 'web' is 3 characters long split between 1 vowel and two consonants. Word splitting yields 1 word: web. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page did not load

The browser never reached this site, so there is no screenshot of it.

Page Load Overview

2.37s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
4	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: fix-3rivers-fcu-live-e22b8.web.app