Security Scan Report: zoho-26c66.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 6 domains to perform 23 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://zoho-26c66.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

A Firebase-hosted page that titles and presents itself as Zoho while running on a non-Zoho domain, with Login/Register links and recycled template filler content — a brand-impersonation funnel, though no credential form appears in this capture.

Risk Factors (5)
Brand impersonation of Zoho on a domain that is not zoho.com
Deceptive hostname constructed to look like a Zoho-branded site
Login/Register endpoints behind a page impersonating another company's brand
Scraped/placeholder template content inconsistent with the claimed product
Unranked domain with no verifiable ownership or company information
Domain age information unavailable

Details

Page Title

Zoho

Scan Type

public

Domain Name Analysis

Domain 'zoho-26c66.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 'zoho-26c66'. Its registrable label 'firebaseapp' stretches across 11 characters split between five vowels and 6 consonants. Breaking it apart gives 3 words: fire, base, app. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zoho-26c66.firebaseapp.com/

Page Load Overview

0.38s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,681 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate business33% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business
33%
technology software
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
265.181.120.60United Kingdom
AS211912WHG Hosting Services Ltd
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
2216.24.57.16United States
AS397273Render
245.43.142.5United Kingdom
AS16276OVH SAS
2172.66.148.163Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2216.24.57.18United States
AS397273Render
245.43.142.3United Kingdom
AS16276OVH SAS
245.43.142.2United Kingdom
AS16276OVH SAS
2311--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T159F2FA31D2172A31CC17C3DCBBB973AD24A3C28FA1A51244DFBE47A5229DCD855938DA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:LJ4bFHs5iwgp1wwwEexowwwEeDJwwwweHk4bFHs5iX2F:+BLrwwwEeSwwwEeVwwwweHtBM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:37200:VAoC4KCKgmv3CBUOIEiTkASBFoAQhNCAAIiBByCGliQo15Djt1SJOAS5InoZEYEClBZwUuIneCAFAAABlCWXjzUqFEAQJjEI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data