Security Scan: Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/44e830d2-ece7-429e-a887-635da546b2bd Domain and IP registration (RDAP)/api/v1/rdap/44e830d2-ece7-429e-a887-635da546b2bdHow often this domain was scanned/api/v1/domain/stats/review-login-mobile.firebaseapp.com Scan history for this domain/api/v1/domain/history/review-login-mobile.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://review-login-mobile.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Cloaked page on a Firebase subdomain matching an analyst-vetted UK mobile 'account recovery' phishing kit (critical YARA hit); lure is gated, so no form was captured, but the kit is known credential/card harvesting infrastructure.

Risk Factors (5)

Known malicious phishing kit identified by analyst-vetted roster

Critical-severity YARA rule match for a credential-and-card harvesting kit

Cloaking/gating behavior: page renders only a 'Cloak' placeholder instead of real content

Free hosting subdomain (firebaseapp.com) whose real creation date cannot be verified

Kit targets logins, card data and number-porting codes, exfiltrated to an operator backend

Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Favicon Hash

MMH3: 708753611

MD5: a1fb669eaf3f793c9f217f2777f7a499

Domain Name Analysis

You're looking at domain 'review-login-mobile.firebaseapp.com' on the commercial generic top-level domain (.com) with subdomain 'review-login-mobile'. The second-level label 'firebaseapp' is 11 characters long containing five vowels alongside six consonants. Splitting it apart reveals 3 words: fire, base, app. The median word length lands at four characters. No strong language cues emerged from the frequency lists.