Security Scan Report: file-greview.firebaseapp.com

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 3 domains to perform 10 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://file-greview.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 94%

9
Risk Score

Fake 'you received a document' login page on a firebaseapp.com subdomain that harvests email addresses and mailbox passwords and ships them to a Telegram bot. Credential phishing — do not enter any credentials.

Risk Factors (6)
Login form (email + password) collecting mailbox credentials under a fake document-delivery lure
Credential exfiltration channel: Telegram bot token embedded in page script
Brand impersonation: WeTransfer-style document-sharing pretext on a non-WeTransfer domain
Hosted on a free, instantly creatable firebaseapp.com subdomain with no verifiable ownership or age
Hostname 'file-greview' typosquats a plausible file-review/service name to appear legitimate
French-language social-engineering copy ('Vous avez reçu un document… entrez les informations d'identification de l'e-mail')
Domain age information unavailable

Details

Page Title

Accueil

Scan Type

public

Domain Name Analysis

You're looking at domain 'file-greview.firebaseapp.com' on the commercial generic top-level domain (.com), featuring subdomain 'file-greview'. Its registrable label 'firebaseapp' stretches across 11 characters with five vowels and six consonants. Breaking it apart gives three words: fire, base, app. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Vous avez regu un document PDF+ = Por Pour lire le document, entrez les informations identification de e-mail A laquelle ce fichier a été envoyé Adresse emai Mot de passe é et de cookies, Vous a...

Page Load Overview

0.39s
Total Load Time
199 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it
Text Length:308 chars
Detector Agreement:100%
Language mismatch: Declared as it but detected as fr

Website Classification

Primary Category

news media journalism39% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
39%
government public service
38%
documentation technical
36%
real estate property
35%
healthcare medical
31%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
418.64.211.79Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
118.64.211.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.64.211.122Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
106--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15D12B7969AF72145A913D0687FF62B156662C017C34DC8147F9E33958F8A6C9A8B33CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:lL8LxLvLL40udEvGrPfQmtVsSYbCmYyJdqh8dfud3gGEMJJeNdp:lgtL/40KB89lN/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9116:qJiUE1KwMdCShgkRNYa5E2gkgKEAw5TtCQFgAQxUfRMIBG+C2kAiywQloBIAHvaSKJBS0iDBCFF0CSOtcEOgJQMCKgIMcyZQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7ffc3e7ff
Perceptual Hash:b08acf649a9365ce
Difference Hash:0000080e16961600
Wavelet Hash:185a6642c2c2da5a
Color Hash:070020001c0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data