Security Scan Report: v2-fbprotect.firebaseapp.com

Redirected to:
https://v2-fbprotect.firebaseapp.com/ipban.html
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://v2-fbprotect.firebaseapp.com/

Effective URL:
https://v2-fbprotect.firebaseapp.com/ipban.html
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Free Firebase subdomain named 'fbprotect' with a 'Protect Account' page carrying a single-source phishing report; no form captured in this snapshot, but the naming and intel point to an account-protection phishing lure — avoid.

Risk Factors (4)
Single-source phishing report on the scanned primary domain
Deceptive hostname 'v2-fbprotect' styled after Facebook account-protection branding, hosted on a free firebaseapp.com subdomain
Page titled 'Protect Account' with an 'ipban' path — consistent with a staged phishing/account-blocked lure, but no substantiating body content
Domain unranked and on shared hosting; true creation date unknown
Domain age information unavailable

Details

Page Title

Protect Account

Scan Type

public

Domain Name Analysis

The domain 'v2-fbprotect.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'v2-fbprotect'. The core label 'firebaseapp' covers 11 characters containing five vowels alongside six consonants. Word splitting yields 3 words: fire, base, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://v2-fbprotect.firebaseapp.com/

Page Load Overview

1.42s
Total Load Time
32 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:15 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1142.251.127.95Google · CDNUnited States
AS15169Google LLC
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
43--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T118117A8E14930419EBB69115595BBD1CF2633597FA408508BD8C5B223F7C3CACAABACC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:0WF5yfL8dwNVM8ho7hIylHuzRvQnN4jMGM:0WFca5io7NluzBQGoN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1003:AAAAAAARAAAAAAABAQAAAAAAAAAAAAgAAAACACAACBQAAgAAAAAAigAAAAAAAAIQAAAIIAAAAAAAAAAAJAAAAAAAAwIAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data