Security Scan: href.li

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3c06f4e4-6c85-47ee-b7d4-d1eede38e665 Domain and IP registration (RDAP)/api/v1/rdap/3c06f4e4-6c85-47ee-b7d4-d1eede38e665How often this domain was scanned/api/v1/domain/stats/mit-alert01a.firebaseapp.com Scan history for this domain/api/v1/domain/history/mit-alert01a.firebaseapp.com?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 5 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://mit-alert01a.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 86%

Risk Score

Bare redirect page on a throwaway Firebase subdomain that bounces visitors to a duckdns.org /auth.php endpoint; a HIGH IDS phishing-redirect alert confirms it as part of a credential-theft chain.

Risk Factors (5)

Automatic redirection to an untrusted duckdns.org endpoint ending in /auth.php

HIGH-severity IDS phishing/credential-theft redirect signature

Deceptive subdomain naming that evokes an institutional security alert

Use of a link-hiding redirector (href.li) to obscure the destination

Free hosting platform tenant with no reputation and unknown page age

Domain age information unavailable

Details

Page Title

href.li

Scan Type

public

Domain Name Analysis

Domain 'mit-alert01a.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'mit-alert01a'. The second-level label 'firebaseapp' is 11 characters long with five vowels and 6 consonants. Breaking it apart gives three words: fire, base, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Bs This site can’t be reached m0-online-infov4.duckdns.org took too long to respond Try: * Checking the connection * Checking the proxy and the firewall ERR_TIMED_OUT ( Details)

Page Load Overview

75.52s

Total Load Time

N/A

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:100%

Script:Latin

Direction:ltr

Detection Details

Text Length:67 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism48% confidence

Type: static

Method: ml+structural

All Detected Categories

news media journalism

48%

healthcare medical

41%

e-commerce shopping

38%

social media network

37%

government public service

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
1	192.0.78.27	San Francisco, California, United States	AS2635Automattic, Inc
1	45.83.122.123	British Virgin Islands	AS57043Hostkey B.v.
0	3	-	-

Detected Technologies1

Meta-Refresh-Redirect

100%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: mit-alert01a.firebaseapp.com