Security Scan Report: review-login-mobile.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://review-login-mobile.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Cloaked firebaseapp.com subdomain matching an analyst-vetted UK mobile/bank 'account recovery' phishing kit (CRITICAL YARA hit). Forms weren't served to the scanner, but the kit itself is malicious — avoid.

Risk Factors (4)
Known malicious phishing kit identified by vetted roster and high-precision YARA signature
Cloaking behaviour: page serves minimal 'Cloak' content and no forms to non-targeted clients
Instant free-hosting subdomain (firebaseapp.com) whose actual creation date is unknown; apex age is not attributable
Lure-styled hostname imitating a mobile 'review/login' account flow
Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Domain Name Analysis

Domain 'review-login-mobile.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'review-login-mobile'. The second-level label 'firebaseapp' is 11 characters long with 5 vowels and 6 consonants. Breaking it apart gives three words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://review-login-mobile.firebaseapp.com/

Page Load Overview

0.77s
Total Load Time
284 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:12 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
91--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A4845B7267436C8BA7A93600192A3D59DC34788FF37C9624EE0C59BB70CC664BE3D919

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:nPnWmDaNKVo7vbQl4BDbC0H5obDHAr74tBaj:nfWmujQls60HQgr7Dj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:397488:nNBhGYFA5FBgBACoCAJKYACOgxRYQVAUIADohImyCEGzIAolIM6iNAxNGIEiAgCRhoKcWCCAFjghhzYDochlgMAAVLEClEQE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:81030303071fffff
Difference Hash:8000000000000000
Wavelet Hash:70f0f0f0f0f0f0f0
Color Hash:#5cac53

Other Hashes

Crop Resistant:8000000000000000

Scan History

Scan history not available

Unable to load historical scan data