Security Scan Report: auth-device-register.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://auth-device-register.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Analyst-vetted UK mobile 'account recovery' phishing kit detected via a critical YARA match; the page cloaks its credential-harvesting lure behind device/country gating. Do not interact.

Risk Factors (5)
Known malicious phishing kit identified by analyst-vetted roster and YARA
Conditional cloaking: lure is served only to targeted devices/regions, concealing it from inspection
Free shared-hosting subdomain with unknown page age
Deceptive 'account recovery' framing typical of credential-harvesting lures
No genuine site content or business purpose behind the page
Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Domain Name Analysis

The domain 'auth-device-register.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'auth-device-register'. Count 11 characters in 'firebaseapp' with 5 vowels and six consonants. Breaking it apart gives three words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://auth-device-register.firebaseapp.com/

Page Load Overview

0.43s
Total Load Time
284 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:12 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
91--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18A845B7267436C8BA7A93600192A3D59DC34788FF37C9624EE0C59BB70CC664BE3D919

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:zPnWmDaNKVo7vbQl4BDbC0H5obDHAr74tBaj:zfWmujQls60HQgr7Dj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:397473:ZkoeJYDIgAK0UFEIgiEolTlROBAYEBgDTAeE4NdQg1SEFEIYUhAIxgCJQKBUeRLUIy6RDGYTAI6EFEkEkIAEKDGiAABAUAoL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:81030303071fffff
Difference Hash:8000000000000000
Wavelet Hash:70f0f0f0f0f0f0f0
Color Hash:#d279a7

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data