Security Scan: Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/35e02e57-10d1-460b-9052-f08f011cad33 Domain and IP registration (RDAP)/api/v1/rdap/35e02e57-10d1-460b-9052-f08f011cad33How often this domain was scanned/api/v1/domain/stats/auth-device-register.web.app Scan history for this domain/api/v1/domain/history/auth-device-register.web.app?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://auth-device-register.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Page matches an analyst-vetted UK mobile/bank account-recovery phishing kit (critical YARA hit) and uses cloaking to hide its lure from scanners. Do not interact; report it.

Risk Factors (5)

Analyst-vetted known phishing kit identified on the page

Critical YARA signature for a UK mobile/bank account-recovery phishing kit

Cloaking behaviour: content gated on device type and country so scanners see an empty shell

Credential, payment and porting-code harvesting infrastructure per kit profile

Free instant-hosting subdomain with unknown creation date and no domain reputation

Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Favicon Hash

MMH3: 708753611

MD5: a1fb669eaf3f793c9f217f2777f7a499

Domain Name Analysis

You're looking at domain 'auth-device-register.web.app' on the application-focused generic top-level domain (.app) and includes subdomain 'auth-device-register'. The second-level label 'web' is 3 characters long containing 1 vowel alongside 2 consonants. It segments into 1 word: web. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.