Security Scan Report: enirvod.firebaseapp.com

Redirected to:
https://online-app-deqzgal1.idm-tlkom.top/frtis
Submitted: Completed: publiccompleted
This website contacted 21 IPs in 5 countries across 11 domains to perform 22 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://enirvod.firebaseapp.com/

Effective URL:
https://online-app-deqzgal1.idm-tlkom.top/frtis
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Phishing-flagged firebase subdomain redirects to a typosquatted .top domain serving an expired-domain lure with hostile-network IDS alerts; no forms seen, but avoid.

Risk Factors (5)
Entry domain flagged as phishing by threat intelligence (single-source, unverified)
Cross-domain redirect from a free firebaseapp.com subdomain to a .top domain unrelated to it
Typosquat/deceptive hostname imitating the Telkom brand
HIGH network IDS alerts for hostile *.top DNS and HTTP traffic
Expired-domain parking page with click-through 'renew' lure and unrelated ISP search ads
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'enirvod.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'enirvod'. The core label 'firebaseapp' covers 11 characters containing 5 vowels alongside 6 consonants. Word splitting yields three words: fire, base, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://enirvod.firebaseapp.com/

Page Load Overview

2.16s
Total Load Time
299 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:62%
Script:Latin
Direction:ltr

Detection Details

Text Length:112 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software57% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2103.224.212.142Australia
AS133618Trellian Pty. Limited
1199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
154.192.35.124Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.204.240.1Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
1185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
194.237.93.104Frankfurt am Main, Hesse, Germany
AS202053UpCloud Ltd
179.127.216.203Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
1208.91.196.46British Virgin Islands
AS40034Confluence Networks Inc
1185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
2221--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F0E2B51486F2081156973026EE7FAE8577650A23758CEC08B98CA640FFAD9B70DB77F4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:1BZBsjBjrAyhtbgt4MiIO/5/9SLu5Jvg1s17QZGG:5MM6Fg1s176

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:34005:JAMQCxhKRAWMiUooLAfUFAHIsAAKjyIuBAggeARGCYkaACHMGjsQJAOkiAiJkg5gEAAqHklMAElGIBSQNAgaGCOZUEkOIAgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c300000000ff
Perceptual Hash:a8609f4a9f4ef344
Difference Hash:71969697b7b3b33b
Wavelet Hash:0042ffc75b1118ff
Color Hash:31007000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data