Security Scan: Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/672c3014-f6c2-47f0-94bf-0e3aa8ff4e5f Domain and IP registration (RDAP)/api/v1/rdap/672c3014-f6c2-47f0-94bf-0e3aa8ff4e5fHow often this domain was scanned/api/v1/domain/stats/auth-device-register.web.app Scan history for this domain/api/v1/domain/history/auth-device-register.web.app?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://auth-device-register.web.app/

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Analyst-vetted CRITICAL phishing kit: a device/country-cloaked UK mobile/bank 'account recovery' page on a free .web.app subdomain; visible content is only a 'Cloak' gate hiding the lure.

Risk Factors (5)

Analyst-vetted known malicious phishing kit identified on the page (CRITICAL)

CRITICAL YARA match for a UK mobile/bank account-recovery cloaking kit

Cloaking behavior: content suppressed into a 'Cloak' gate, hiding the lure from non-target devices

Free hosting subdomain (.web.app) with unknown subdomain creation date

Unranked domain with no established reputation

Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Favicon Hash

MMH3: 708753611

MD5: a1fb669eaf3f793c9f217f2777f7a499

Domain Name Analysis

The domain 'auth-device-register.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'auth-device-register'. The second-level label 'web' is 3 characters long containing one vowel alongside 2 consonants. Word splitting yields 1 word: web. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.