Security Scan Report: office-ce1ca.firebaseapp.com

Redirected to:
https://firebasestorage.googleapis.com/v0/b/office-ce1ca.appspot.com/o...
Response type:API response (JSON)application/jsonHTTP 402The server returned machine-readable data for programs (an API response), not a web page. The screenshot shows how a browser displays the raw data.
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://office-ce1ca.firebaseapp.com/

Effective URL:
https://firebasestorage.googleapis.com/v0/b/office-ce1ca.appspot.com/o...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

5
Risk Score

Token-gated HTML file on a random Firebase bucket, reported as phishing by a single unverified feed. Currently returns only a Firebase 402 billing error, so no active lure is served, but the hosting pattern warrants avoidance.

Risk Factors (3)
Single-source phishing report against the exact primary host
Opaque random-subdomain storage bucket serving an HTML file by access token
Hosting on a free instant-subdomain platform with no attributable age or reputation
Safety Factors (6)
No credential, payment or login forms present (0 forms, 0 password fields)
No JavaScript malware patterns, no high-precision hunting-rule hits, no obfuscated or credential-exfiltrating scripts
No network-level IDS alerts
No brand impersonation — the only text served is Firebase's own billing/error message
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'office-ce1ca.firebaseapp.com' is registered, featuring subdomain 'office-ce1ca'. The second-level label 'firebaseapp' is 11 characters long holding five vowels versus six consonants. Splitting it apart reveals three words: fire, base, app. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://office-ce1ca.firebaseapp.com/

Page Load Overview

0.28s
Total Load Time
3 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:406 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical50% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
50%
technology software
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1172.217.119.4Google · CDNUnited States
AS15169Google LLC
1199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1172.217.112.4Google · CDNUnited States
AS15169Google LLC
1172.217.114.4Google · CDNUnited States
AS15169Google LLC
44--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16CF02663D4D14517073912ECF7E13209EE59752CA33D4D8D7580907C9BDBC2E85170D4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kxV7HfJQ6XQs75YMu6ao7SDdugHACX27e2YvKHV4W6Y7xELa:kHFQ6b5YMHNWQggj7MS1b6pa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:569:AAAAAAQAAAAAEAAAAAAAAEAAAAAAAABAEAAAAAAIEAAAAAAAAAAIAAAAAEAAAAAAAAAAAABAAAAAAAAIAAAAACAAAAAAAACA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000fffffffffffff
Perceptual Hash:b3323232324e4fcf
Difference Hash:9818000000000000
Wavelet Hash:007fffff00000000
Color Hash:#e06ca0

Other Hashes

Crop Resistant:9818000000000000

Scan History

Scan history not available

Unable to load historical scan data