ScanMalware.com

Security Scan Report: sentinel-288bb.firebaseapp.com

Redirected to:
https://sentinel-288bb.firebaseapp.com/login
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2021f9e8-de73-4bec-a3f5-aea0c25d7b21Domain and IP registration (RDAP)/api/v1/rdap/2021f9e8-de73-4bec-a3f5-aea0c25d7b21How often this domain was scanned/api/v1/domain/stats/sentinel-288bb.firebaseapp.comScan history for this domain/api/v1/domain/history/sentinel-288bb.firebaseapp.com?limit=15
This website contacted 35 IPs in 2 countries across 17 domains to perform 51 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://sentinel-288bb.firebaseapp.com/

Effective URL:
https://sentinel-288bb.firebaseapp.com/login
Redirected

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

Unranked Firebase-hosted passwordless phone login branded 'Safety Check'; no password/payment form, no brand impersonation, no threat-intel or malware match. Only a generic critical IDS client signature. Insufficient evidence for phishing; verify the operator before entering a phone number.

Risk Factors (3)
Phone-number-based account login on an unranked free-hosting subdomain with no visible operator identity or legal information
Unknown creation date for the hosting subdomain — content could have been published recently
Generic critical IDS web-client alert recorded against the page
Safety Factors (6)
No password, disguised-password, or payment fields in the captured DOM (verified form facts: 0/0/0)
No cross-origin form submission and no credential exfiltration detected in JavaScript behaviour
All third-party script hosts (Hotjar, Sentry, Google Fonts, Firebase APIs) are well-ranked, mainstream services
No Indicators of Compromise matched, no JavaScript malware patterns, no known malicious kit in the roster
No impersonation of another organisation's brand — the page uses only its own 'Safety Check' name
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5
Domain age information unavailable

Details

Page Title

Safety Check

Scan Type

public

Domain Name Analysis

The domain 'sentinel-288bb.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'sentinel-288bb'. Its registrable label 'firebaseapp' stretches across 11 characters holding 5 vowels versus 6 consonants. Breaking it apart gives three words: fire, base, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

(Select all squares with motorcycles If there are none, click skip Se Pour v¢ utilisé | Vous n'a Se connecter

Page Load Overview

5.06s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,284 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as fr

All Detected Languages

🇫🇷fr(90%)🇺🇸en(10%)

Website Classification

Primary Category

gambling betting52% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

gambling betting
52%
documentation technical
38%
phishing scam
27%
news media journalism
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8142.251.154.120Google · CDNUnited States
AS15169Google LLC
7199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
334.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2142.251.154.119Google · CDNUnited States
AS15169Google LLC
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1151.101.2.217Fastly · CDNUnited States
AS54113Fastly, Inc.
118.66.102.53Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
165.9.130.29Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1142.251.157.119Google · CDNUnited States
AS15169Google LLC
5135--

Detected Technologies8

Sentryv6.13.3
50%
reCAPTCHA
45%
HTTP/3
40%
HSTS
40%
Firebase
40%
Google Analytics
35%
Ant Design
30%
Hotjar
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16E92A2513E64EC1801DF1DDC1833562660BA8395E6A356D8F9B6C3F0A3AEDBCC633664

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ko8MvObJabD6aYOqxRfURiSdCVMbAkMaIz5AfiS+G8D5NC44oxP396pgp5U/i:kRSF368kURiESEiFC8NNChUP3mQ5UK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19952:ADkFcGMBSioRD4DBNYAFgIHwHSMSmAdDACSWAI7MMrCgChiSIAILopcGfpIyMNUQ1QbQgDmUWAEyAiBCApRQIAYAAksCCQAD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7ffffe7
Perceptual Hash:e666998ccc3399cc
Difference Hash:4d4d4d4d0d000c0c
Wavelet Hash:07030303273f1f07
Color Hash:07001000180

Other Hashes

Crop Resistant:4d4d4d4d0d000c0c,18a4c4a4a444a458,6545c1f19c9551a2

Scan History

Scan history not available

Unable to load historical scan data