Security Scan Report: csbim-connect.web.app

Redirected to:
https://csbim-connect.web.app/Login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 41 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://csbim-connect.web.app/

Effective URL:
https://csbim-connect.web.app/Login
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 80%

9
Risk Score

One primary-domain phishing report (single-source, unverified) plus a credential login form on an unknown-age Firebase subdomain. Self-branded and no exfiltration seen, but treat as credential phishing.

Risk Factors (3)
Primary domain reported as phishing by threat intelligence (single-source, unverified)
Credential login form hosted on a shared .web.app subdomain of unknown creation age
Domain is unranked in Cisco Umbrella
Domain age information unavailable

Details

Page Title

CONNECT | Login

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'csbim-connect.web.app' is registered, featuring subdomain 'csbim-connect'. The second-level label 'web' is 3 characters long split between 1 vowel and two consonants. It segments into one word: web. No strong language cues emerged from the frequency lists.

Screenshot

y CONNECT a Ay Bem-vindo ao CONNECT! Enderego de E-mail [e Ex: esbim@connect.net ‘Senha | © Digite sua senha © Q tembrarde mim Esqueceu sua senha? OU CONTINUE CoM [ © Google | Facebook | EX M...

Page Load Overview

1.72s
Total Load Time
1019 KB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR
Text Length:229 chars
Detector Agreement:67%

Website Classification

Primary Category

social media network99% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
99%
finance banking
59%
technology software
54%
government public service
38%
adult content
37%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
41199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
411--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13603A805F808EA286C3B9E4C95BD9F398048E973DF358435F14EC84999D3FF52B99A84

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:fdaiumFGz0rGV4xksc64Jysq7vQ+WT1IqYErBRqYyNf1U0dO3hY1UPl1ejj:ftgebx/c64Jysq7vO1ICBR41S61Ud1y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41236:gDDSOLNWJEMBQiSoBBvSsBIUYIEwgimASADAQEQIACUoThDMQAIAoMFAsSLcAgG2jGKaA2FI2lR9hfAApQCSIgxoUJkwzGEg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7ffe7e7ffef
Perceptual Hash:b399cc6626cc6666
Difference Hash:104c08324d0c300c
Wavelet Hash:c0c1f4fce4fcfc00
Color Hash:N/A

Other Hashes

Crop Resistant:104c08324d0c300c

Scan History

Scan history not available

Unable to load historical scan data