Security Scan: Wallet

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2d5c61ba-d949-45af-97a1-92a6360457ec Domain and IP registration (RDAP)/api/v1/rdap/2d5c61ba-d949-45af-97a1-92a6360457ecHow often this domain was scanned/api/v1/domain/stats/reactivate-device-au.firebaseapp.com Scan history for this domain/api/v1/domain/history/reactivate-device-au.firebaseapp.com?limit=15

This website contacted 7 IPs in 2 countries across 4 domains to perform 103 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://reactivate-device-au.firebaseapp.com/

Effective URL:

https://www.apple.com/uk/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

Risk Score

Entry Firebase hostname has a single-source phishing report and redirects to official Apple Wallet; the final Apple page lacks credential/payment forms and malware, but the flagged link should be avoided.

Risk Factors (3)

Entry domain reactivate-device-au.firebaseapp.com has a single-source, unverified phishing report

Apple-themed entry hostname hosted on a free Firebase subdomain whose actual creation date is unknown

Cross-domain redirect from a flagged entry host to apple.com

Safety Factors (5)

Final URL is www.apple.com, the official established Apple domain

Final rendered content appears to be Apple Wallet and is not impersonating another brand

No credential-harvesting password field or payment field was found

No malware hunting-rule patterns, network IDS alerts, or credential exfiltration detected

No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

Wallet

Scan Type

public

Favicon Hash

MMH3: -1295672766

MD5: 38cfdb248210ffd12a6e774119609de8

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'reactivate-device-au.firebaseapp.com' is registered, featuring subdomain 'reactivate-device-au'. The core label 'firebaseapp' covers 11 characters holding five vowels versus 6 consonants. Tokenizing the label suggests 3 words: fire, base, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.49s

Total Load Time

5.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:17 chars

Detector Agreement:0%

Website Classification

Primary Category

entertainment media85% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media

85%

finance banking

60%

documentation technical

36%

technology software

29%

e-commerce shopping

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
19	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
14	23.36.157.47Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
14	17.8.130.102	United States	AS714Apple Inc.
14	17.253.15.161	Frankfurt am Main, Hesse, Germany	AS6185Apple Inc.
14	17.253.15.148	Frankfurt am Main, Hesse, Germany	AS6185Apple Inc.
14	17.253.15.156	Frankfurt am Main, Hesse, Germany	AS6185Apple Inc.
14	17.253.15.131	Frankfurt am Main, Hesse, Germany	AS6185Apple Inc.
103	7	-	-