Security Scan Report: finlesuvr.firebaseapp.com

Redirected to:
https://2026-10-27.urldance.com/en?idm-tlkom.top
Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 4 countries across 9 domains to perform 23 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://finlesuvr.firebaseapp.com/

Effective URL:
https://2026-10-27.urldance.com/en?idm-tlkom.top
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Redirect chain ending on an unknown host serving a fake 'verify password' gate with a disguised password field, Unicode evasion and DevTools blocking — a credential-harvesting lure, not a real login.

Risk Factors (6)
Disguised password field (text input with password placeholder) with no username field
Unicode/normalisation evasion in form inputs
Cross-domain redirect from a free Firebase hosting subdomain to an unrelated domain (urldance.com) with a further link to a .top host
DevTools and view-source blocking JavaScript (anti-analysis)
Fake 'too many visitors / verify password' gate used to collect a password rather than any legitimate login flow
HIGH-severity network IDS alerts for *.top domain traffic
Domain age information unavailable

Details

Page Title

Latest @ Sites

Scan Type

public

Domain Name Analysis

The domain name 'finlesuvr.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'finlesuvr'. Count 11 characters in 'firebaseapp' containing five vowels alongside 6 consonants. Splitting it apart reveals three words: fire, base, app. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://finlesuvr.firebaseapp.com/

Page Load Overview

0.45s
Total Load Time
130 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:x-default
Text Length:272 chars
Detector Agreement:100%
Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

social media network82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
82%
news media journalism
53%
documentation technical
50%
technology software
46%
healthcare medical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10156.225.108.42Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
1199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1172.67.206.83Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1156.225.108.43Hong Kong
AS139057Edgenext Legend Dynasty Pte. Ltd.
143.174.247.36Singapore
127.159.90.74China
AS4134Chinanet
143.174.246.36Singapore
143.169.95.124SingaporeUnknown
114.215.182.140China
AS4134Chinanet
1104.21.15.148Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2314--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T140C1D66AA9E509361327C1C914B6F71DA6B6D00BDA4BC904B1FCB9841FCBFC14813A94

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:CdAnw8/0oYIiCoT3bKNNBCLUJtZK7DGKs2gqIj:CdGYo7VbgY2BIj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5987:UVFApBFrMEIMAAIEBAIORlDxJAIABGkAAECgEEAMCKUISEIEKIgLJoBUIAQgAoxHQABBiEDFTKKiEkEjh3CUABAGGAgELIyg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:01091f1b1f1f1f0f
Perceptual Hash:8c1d337666cc9933
Difference Hash:fff3b3b3f3b3f3ff
Wavelet Hash:01191b1b1f1f1f1f
Color Hash:#6653ac

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data