Security Scan: Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/45c0bb8f-9051-4d3d-a155-85a122e0b769 Domain and IP registration (RDAP)/api/v1/rdap/45c0bb8f-9051-4d3d-a155-85a122e0b769How often this domain was scanned/api/v1/domain/stats/auth-device-register.firebaseapp.com Scan history for this domain/api/v1/domain/history/auth-device-register.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://auth-device-register.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Analyst-vetted CRITICAL phishing kit (UK mobile/bank account-recovery family) detected by YARA on this Firebase cloaking shell; the blank 'Cloak' page hides a credential and card-harvesting lure from non-targeted visitors. Avoid interaction.

Risk Factors (5)

Known malicious phishing kit identified by analyst-vetted roster (CRITICAL)

CRITICAL YARA rule UK_Mobile_Recovery_OwnerInfo_Cloak_Kit matched the page body

Kit is documented to exfiltrate logins, card data and number-porting codes to an operator backend

Cloaked delivery: content gated by device/country, blank shell served to other visitors

Anonymous free-hosting subdomain with unknown creation date and no domain reputation

Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Favicon Hash

MMH3: 708753611

MD5: a1fb669eaf3f793c9f217f2777f7a499

Domain Name Analysis

Domain 'auth-device-register.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'auth-device-register'. The registrable portion 'firebaseapp' spans 11 characters containing 5 vowels alongside 6 consonants. Tokenizing the label suggests three words: fire, base, app. The median word length lands at four characters. No strong language cues emerged from the frequency lists.