Security Scan: Safety Check

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/136cc82b-0820-4b9a-bd74-aece511796ce Domain and IP registration (RDAP)/api/v1/rdap/136cc82b-0820-4b9a-bd74-aece511796ceHow often this domain was scanned/api/v1/domain/stats/sentinel-288bb.firebaseapp.com Scan history for this domain/api/v1/domain/history/sentinel-288bb.firebaseapp.com?limit=15

This website contacted 28 IPs in 2 countries across 17 domains to perform 53 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://sentinel-288bb.firebaseapp.com/

Effective URL:

https://sentinel-288bb.firebaseapp.com/login

Redirected

AI Security Verdict

Moderate Risk

Confidence: 74%

Risk Score

Anonymous free-Firebase 'Safety Check' page collecting a phone number behind a French anti-wire-fraud lure and a CAPTCHA gate, with a CRITICAL IDS alert and no real organisation behind it — treat as suspect credential harvesting.

Risk Factors (5)

Phone-number credential collection form on a free, unclaimed-branding Firebase subdomain

No organizational identity, branding, legal notice or contact details to substantiate the 'Safety Check' service

Anti-fraud / wire-transfer language used as a lure with no institution named

CAPTCHA challenge gating the login flow (scanner-evasion pattern)

CRITICAL network IDS web-client alert on the page

Safety Factors (7)

No password fields, no payment or card fields captured

No YARA JavaScript malware patterns and no known malicious kit in the roster

No threat-intelligence Indicators of Compromise against the page or its resources

No cross-origin form submission or credential exfiltration detected

JavaScript served mainly from ranked third parties (Hotjar, Sentry, Firebase/Google APIs)

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

Safety Check

Scan Type

public

Favicon Hash

MMH3: 1621365956

MD5: 9041297cb4bed29b817c2ae9c616eb15

Domain Name Analysis

Domain 'sentinel-288bb.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 'sentinel-288bb'. Count 11 characters in 'firebaseapp' with five vowels and 6 consonants. Splitting it apart reveals three words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.73s

Total Load Time

3.3 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:51%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,284 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as fr

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
26	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	151.101.194.217Fastly · CDN	United States	AS54113Fastly, Inc.
1	18.66.102.11Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	142.251.157.119Google · CDN	United States	AS15169Google LLC
1	142.251.14.94Google · CDN	United States	AS15169Google LLC
1	172.217.119.4Google · CDN	United States	AS15169Google LLC
1	65.9.130.86Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	172.217.118.4Google · CDN	United States	AS15169Google LLC
1	34.160.81.0Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
53	28	-	-