ScanMalware.com

Security Scan Report: qtrlkh.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/49209760-9540-468d-bafb-b4902767444eDomain and IP registration (RDAP)/api/v1/rdap/49209760-9540-468d-bafb-b4902767444eHow often this domain was scanned/api/v1/domain/stats/qtrlkh.firebaseapp.comScan history for this domain/api/v1/domain/history/qtrlkh.firebaseapp.com?limit=15
This website contacted 5 IPs in 1 country across 4 domains to perform 9 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://qtrlkh.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Fake 'OWA Login' page impersonating Microsoft Outlook on a firebaseapp.com subdomain, with a phishing threat-intel report and a broken reCAPTCHA typical of a phishing kit. Avoid entering any credentials.

Risk Factors (4)
Impersonation of Microsoft Outlook Web Access login branding on an unrelated firebaseapp.com subdomain
Single-source phishing threat-intelligence report on the primary domain
Misconfigured reCAPTCHA with invalid site key, characteristic of copied phishing kits
Unranked, unknown-creation subdomain on a shared hosting platform
Domain age information unavailable

Details

Page Title

OWA Login

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'qtrlkh.firebaseapp.com' is registered; it also runs on subdomain 'qtrlkh'. Count 11 characters in 'firebaseapp' containing five vowels alongside 6 consonants. Segmentation suggests 3 words: fire, base, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Please verify you are not a robot ERROR for site owner: = Invalid domain for site key aon

Page Load Overview

0.84s
Total Load Time
787 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:70%
Script:Latin
Direction:ltr

Detection Details

Text Length:43 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical35% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
35%
news media journalism
30%
adult content
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1142.251.154.119Google · CDNUnited States
AS15169Google LLC
1142.251.127.94Google · CDNUnited States
AS15169Google LLC
1142.251.152.119Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
95--

Detected Technologies6

Cloudflare
50%
reCAPTCHA
45%
HTTP/3
40%
HSTS
40%
Firebase
40%
Cloudflare Turnstile
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EB41A8B72A6015140C134BA4AE22B785E842E12FFC88C5D57C9D8F283BD59F7C993765

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:FJ+CL42Cx2A6sjqjrkxm3OBzHhYy11rZfXHhFSuy/Z3:Cr2A6XnCHOyndHi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2421:AAAIAAAAEAAAAFAgQAAAAACAACKBARAABgAIAoAAAEYACUIEIcAAABgyABAIBkAAMAhAIAAABAAAEAAAACAAAAAgQAAAAAIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7ffffffffffff
Perceptual Hash:b333333333266666
Difference Hash:0c08000000000000
Wavelet Hash:e7e7ffff00000000
Color Hash:07400030040

Other Hashes

Crop Resistant:0c08000000000000

Scan History

Scan history not available

Unable to load historical scan data