Security Scan Report: ione65.firebaseapp.com

Redirected to:
https://www.google.com/search?q=covid&sei=h8LFasecPLOTxc8Pvt7t0AM
Site favicon
Submitted: Completed: publiccompleted
This website contacted 20 IPs in 2 countries across 9 domains to perform 25 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://ione65.firebaseapp.com/

Effective URL:
https://www.google.com/search?q=covid&sei=h8LFasecPLOTxc8Pvt7t0AM
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Anonymous Firebase redirector that instantly bounces visitors to a Google search URL while an inline script carries a Telegram bot token (data-exfiltration channel). No credential form, but the bot-token sink and obfuscated JS mark it as untrustworthy.

Risk Factors (4)
Inline script holding a Telegram bot token (messaging-bot exfiltration sink)
Redirector page on an anonymous free hosting subdomain with unknown creation date
eval() and encoding/decoding functions in inline JavaScript
Redirect destination is a search engine query URL, a common shape for cloaked traffic/spam gateways
Domain age information unavailable

Details

Page Title

covid - Google Suche

Scan Type

public

Domain Name Analysis

The domain 'ione65.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'ione65'. The core label 'firebaseapp' covers 11 characters split between five vowels and 6 consonants. Breaking it apart gives three words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ione65.firebaseapp.com/

Page Load Overview

0.15s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:6,673 chars
Detector Agreement:75%

Website Classification

Primary Category

technology software42% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1149.154.166.110Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
1142.251.157.119Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
1142.251.14.157Google · CDNUnited States
AS15169Google LLC
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
1142.251.20.97Google · CDNUnited States
AS15169Google LLC
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
1192.178.183.100Google · CDNUnited States
AS15169Google LLC
1142.251.152.119Google · CDNUnited States
AS15169Google LLC
2520--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18211999AD4A4452747E18CF2181BF3C0CC32CE28184DE26A7DA9E502CD8C7276AC72F9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:k0mW+UXLfFJprwZpKYdpeGtEh85rE7g7Rv+bC3rvk5B:7mFstrabz5Eh85r+oRWeYP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:934:AAAAAAIAAAgSAAAAAEABAAGAAACIAACAAAAAgEAAAAAAAAAgAAAAAAAAAEBAAAAAgAAAAAgQAAAAhAAAQAAQBAAAAACAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffffffff
Perceptual Hash:870707070f0f1f3f
Difference Hash:c000000000000000
Wavelet Hash:70f0f0f0f0f0f0f0
Color Hash:#e06c6c

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data