Security Scan Report: yocopayme.firebaseapp.com

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 6 domains to perform 8 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://yocopayme.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

A 'Yoco Business Portal' login shell on an unrelated Firebase subdomain with a random-suffixed 'CDN' script host — brand impersonation of a payments provider. Do not enter credentials.

Risk Factors (5)
Impersonation of a different entity's brand (Yoco payments) on a domain it does not own
Deceptive hostname combining the brand with 'payme' on a free hosting subdomain
Third-party script loaded from a randomly named, non-standard CDN host
Opaque loader-only page: no visible content, no organization, no contact or licensing information
Shared hosting-platform tenant with unknown real creation date
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'yocopayme.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'yocopayme'. The core label 'firebaseapp' covers 11 characters with five vowels and six consonants. Word splitting yields 3 words: fire, base, app. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://yocopayme.firebaseapp.com/

Page Load Overview

0.55s
Total Load Time
106 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:79 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
77%
documentation technical
41%
corporate business
30%
finance banking
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.179.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1151.101.65.229Fastly · CDNUnited States
AS54113Fastly, Inc.
86--

Detected Technologies4

Bootstrapv5.3.0
100%
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15F318617EC400048F312C584B8A5F56E9890D80BD2558E55F6BEB67E4FC86DA88B678C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:nY05tccfc6DfRNWZWCntcDfNc6DGLV5j7IXWqVEIQqkKhhqiGrn32aJ0/OzcHTVi:nhNfdvFdGLVR7MhEIHern32aJ02M4Bj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1635:AkEAgAAQAAAAAAIAAABggwAAAAKAEAAAgABASAAAAAAAAAAJAggAAAAAEAAAEIRIAACARAEMAkAAAAAEIAAQAAAAAAAAAAYB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:99cc663399cc6633
Difference Hash:0000083232080000
Wavelet Hash:00003838fcfcfcfc
Color Hash:#40bf82

Other Hashes

Crop Resistant:0000083232080000

Scan History

Scan history not available

Unable to load historical scan data