Security Scan Report: grussegeh.firebaseapp.com

Redirected to:
https://2026-10-27.urldance.com/en?idm-tlkom.top
Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 4 countries across 9 domains to perform 23 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://grussegeh.firebaseapp.com/

Effective URL:
https://2026-10-27.urldance.com/en?idm-tlkom.top
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Anonymous Firebase page redirecting to urldance.com and a hostile-rated .top domain, demanding a 'password' in a disguised, unicode-obfuscated field with DevTools blocked — credential harvesting.

Risk Factors (7)
Disguised password field (text input with password placeholder)
Password field without username — credential harvesting pattern
Unicode/script confusion evasion in form fields
Anti-analysis JavaScript blocking DevTools and view-source
Cross-domain redirect from free Firebase hosting to urldance.com with .top-domain payload reference
IDS HIGH alerts for traffic to a *.top domain rated likely hostile
Page gates content behind 'Enter the password to access the latest links' — a password lure
Domain age information unavailable

Details

Page Title

Latest @ Sites

Scan Type

public

Domain Name Analysis

You're looking at domain 'grussegeh.firebaseapp.com' on the commercial generic top-level domain (.com) and includes subdomain 'grussegeh'. The core label 'firebaseapp' covers 11 characters with 5 vowels and 6 consonants. Splitting it apart reveals 3 words: fire, base, app. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://grussegeh.firebaseapp.com/

Page Load Overview

1.09s
Total Load Time
131 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:x-default
Text Length:257 chars
Detector Agreement:100%
Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

social media network84% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
84%
download file sharing
61%
news media journalism
57%
entertainment media
47%
technology software
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10156.225.108.43Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.21.15.148Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.42Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
143.174.246.36Singapore
1106.74.32.242China
AS133118China Unicom IP network
143.169.95.124Singapore
AS139057Edgenext Legend Dynasty Pte. Ltd.
1111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
1172.67.206.83Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.41Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
2314--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17DD1F76AAAEA4D361367C18914B6F70DA6B6D40BDB4BC50871FC7AC01FCBFC14817A54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:CdAnw8/0oYIiCoruNNmLUJtZVIQKs2gqIj:CdGYoH/bf2BIj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6197:URVQegArMEQIgAIAAQAqQgDCYAIADGwAIICTEGCNCOXIAUEEDogOMCJETGAAYog1QBBBgEDDzaIqoGQEFmCYAACEEAICRIYA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0001191b1f1f1f07
Perceptual Hash:8c49337666cc9973
Difference Hash:4fb3b3b3b3b3b37f
Wavelet Hash:01191b1b1f1f1f1f
Color Hash:#40bf57

Scan History

Scan history not available

Unable to load historical scan data