Security Scan Report: onfact5-production.firebaseapp.com

Redirected to:
https://onfact5-production.firebaseapp.com/#/user/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 3 countries across 5 domains to perform 49 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://onfact5-production.firebaseapp.com/

Effective URL:
https://onfact5-production.firebaseapp.com/#/user/login
Redirected

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Unranked Firebase subdomain hosting an accounting-software login; one unverified PhishDestroy phishing report on the primary domain plus a password form warrants caution, though the form posts to the vendor's own api5.onfact.be and no exfiltration or malware was found.

Risk Factors (3)
Single-source phishing report on the primary domain hosting a credential-collection form
Login form on an unranked, free-tier firebaseapp.com subdomain whose actual creation date cannot be established
Generic platform placeholder title/meta ('FirebaseApp billing platform login') inconsistent with the visible accounting-firm branding
Domain age information unavailable

Details

Page Title

FirebaseApp | Login

Scan Type

public

Domain Name Analysis

Domain 'onfact5-production.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'onfact5-production'. Its registrable label 'firebaseapp' stretches across 11 characters split between 5 vowels and six consonants. Breaking it apart gives three words: fire, base, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Vandelanoite More than accountants Inloggen E-mail Ls | Wachtwoord [a Wachtwoord vergeten Registreer indien je nog geen account hebt Oftoeinmet [=] [+]

Page Load Overview

3.20s
Total Load Time
10.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

Text Length:192 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software42% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
42%
social media
15%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
4184.24.77.135Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4184.24.77.165Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
452.222.136.65Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
43.5.69.36Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
4184.24.77.169Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4184.24.77.167Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
452.222.136.56Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
452.222.136.50Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
43.5.68.118Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
4911--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T127C211B50605A49ED2A3E95960E2B64C2015E426C98B765CE9330F38C6DDFF381ED7F8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:cknQehZ8gugulrwQRZcRZn8SvVcZPMi5ux:QYZ8OulrwQRCRZn8SvmFr5ux

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:25967:lcEPOoQzFBMiowZ0BydYAABCIhC0WAwJgEQhAMxqASqiERgDBaIB4gbA0GQASOQoJAMSCAgKBiuAG3wA5ComQ0sMqAMeoCAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:20b8f9ffffd78301
Perceptual Hash:eb4d66662322ccdc
Difference Hash:cf73335b3b270f0f
Wavelet Hash:00b8f9efff878101
Color Hash:070000001c0

Other Hashes

Crop Resistant:cf73335b3b270f0f

Scan History

Scan history not available

Unable to load historical scan data