ScanMalware.com

Security Scan Report: finlesuvr.firebaseapp.com

Redirected to:
https://search.aipages.dev/en?idm-tlkom.top
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4145af43-97a7-4f8b-ae90-ddae7270a403Domain and IP registration (RDAP)/api/v1/rdap/4145af43-97a7-4f8b-ae90-ddae7270a403How often this domain was scanned/api/v1/domain/stats/finlesuvr.firebaseapp.comScan history for this domain/api/v1/domain/history/finlesuvr.firebaseapp.com?limit=15
This website contacted 9 IPs in 3 countries across 8 domains to perform 17 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://finlesuvr.firebaseapp.com/

Effective URL:
https://search.aipages.dev/en?idm-tlkom.top
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Anonymous password wall on a redirect chain ending at a *.top backend, using a text-disguised password field, Unicode evasion and DevTools blocking — treat as credential harvesting, do not enter any password.

Risk Factors (5)
Disguised password field (text input with password placeholder) and password field with no username
DevTools/right-click/view-source blocking plus Unicode confusion as evasion
Multi-domain redirect chain ending in an anonymous password gate with a *.top backend
HIGH network IDS alerts for traffic to a *.top domain classified as likely hostile
Unranked domain of unknown age on a free hosting platform, with no verifiable owner
Domain age information unavailable

Details

Page Title

Latest @ Sites

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'finlesuvr.firebaseapp.com' is registered and includes subdomain 'finlesuvr'. Count 11 characters in 'firebaseapp' with 5 vowels and six consonants. Word splitting yields 3 words: fire, base, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://finlesuvr.firebaseapp.com/

Page Load Overview

3.95s
Total Load Time
323 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:x-default
Text Length:272 chars
Detector Agreement:100%
Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

social media network82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
82%
news media journalism
53%
documentation technical
50%
technology software
46%
healthcare medical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9172.67.196.251Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1172.67.206.83Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.169.95.124Singapore
AS139341ACE
143.174.246.36Singapore
AS139341ACE
1111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
1104.21.15.148Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.36.163Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1183.240.98.228China
AS56040China Mobile communications corporation
179--

Detected Technologies5

HTTP/3
40%
HSTS
40%
Firebase
40%
jQuery
20%
Baidu Analytics (百度统计)
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12AC1D66AAAE54D361367C1C92176F70CA9B6D40BDA4BC904B1FCB9841FCBFD14813A54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:CdEnw8/0oYIiConyNNmLUJtZenDEKs2gmwj:CdCYoH/b+62hwj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5914:sxHQMhAzMAAIhApQAEIqQgFBYAIACWhIIAKSMGqcCOULAkAECMgKEAIUoHAAIoglQAJAgMzBzWYrgGQgJ2AUAAAEsABERIYC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0001191b1f1f1f07
Perceptual Hash:8c49337666cc9973
Difference Hash:4fb3b3b3b3b3b37f
Wavelet Hash:01191b1b1f1f1f1f
Color Hash:N/A

Other Hashes

Crop Resistant:7f3f3f1f9f3fbfff,9e9ea28392038eb6,4fb3b3b3b3b3b37f

Scan History

Scan history not available

Unable to load historical scan data