Security Scan: https://yolusem-goiglecom.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/558d56a4-3ca5-4e09-bdf9-09796f25b16e Domain and IP registration (RDAP)/api/v1/rdap/558d56a4-3ca5-4e09-bdf9-09796f25b16eHow often this domain was scanned/api/v1/domain/stats/yolusem-goiglecom.web.app Scan history for this domain/api/v1/domain/history/yolusem-goiglecom.web.app?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://yolusem-goiglecom.web.app/

Effective URL:

https://de.ihrkosten-gehaltskont-erhalten.shop/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 72%

Risk Score

Deceptively named Firebase subdomain mimicking google.com that bounces visitors to a German-language 'salary account' lure domain on .shop. Destination was unreachable, so no form was verified, but the naming pattern is a textbook phishing chain.

Risk Factors (5)

Deceptive hostname imitating google.com on a free hosting subdomain

Cross-domain redirect to an unrelated .shop domain with a credential-lure name

Destination host unreachable, so its behaviour and any data collection could not be inspected

Hosting-platform subdomain with unknown creation date; apex age and ranking are not attributable to this page

No ranking/reputation for either hostname

Safety Factors (6)

Verified form facts: 0 total forms, 0 password fields, 0 disguised password fields, 0 payment fields on the submitted page

No JavaScript malware patterns, no behavioral JavaScript signals, no third-party script hosts

No threat-intelligence matches against the scanned page or its resources

No network-level IDS alerts

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'yolusem-goiglecom.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'yolusem-goiglecom'. Count 3 characters in 'web' holding one vowel versus 2 consonants. Tokenizing the label suggests 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Domain does not exist

There was no DNS record for de.ihrkosten-gehaltskont-erhalten.shop when we scanned it, so there is no screenshot.

Page Load Overview

0.90s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: yolusem-goiglecom.web.app