Security Scan Report: verify-st66483.web.app

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 3 domains to perform 7 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://verify-st66483.web.app/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Firebase web.app stub matching an analyst-vetted phishing kit that redirects into Codeanywhere containers hosting bank/post/customs credential phishing. No forms on the stub itself, but it is malicious redirect infrastructure.

Risk Factors (5)
Analyst-vetted known phishing kit match (CRITICAL) on the HTML body
Bare Firebase Hosting redirect stub used to funnel traffic into a Codeanywhere container
Verification-themed subdomain naming typical of credential-harvesting lures
Shared hosting platform tenant with unknown creation date; unranked in Cisco Umbrella
Page itself is unreachable/blank apart from an error and the container reference, indicating use purely as a hop in a redirect chain
Domain age information unavailable

Details

Page Title

wordpress-orange-yak-dikab93096356194.codeanyapp.comother network

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'verify-st66483.web.app' is registered with subdomain 'verify-st66483'. The second-level label 'web' is 3 characters long holding one vowel versus two consonants. Segmentation suggests one word: web. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://verify-st66483.web.app/

Page Load Overview

N/A
Total Load Time
21 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:852 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
76%
documentation technical
51%
adult content
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2151.101.128.64Fastly · CDNUnited States
AS54113Fastly, Inc.
2198.199.109.95San Francisco, California, United States
AS14061DigitalOcean, LLC
03--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ED048F77329A063D86558498E05B43099F20B543F50AC9BC79BCBAD8BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:l/Qho9PKBbl8Vrq9Jzbs6tlg1ySBKw4Q9gcoIsPv2bMy8Oldv:mhoCl8Bqzzbs6okSCggcpsH2eAx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:188297:ZAg1iIqgt2LCRgIQETOMrHAGiBEQQGBDAUE4Agl4ngFEQlSdutMplRsguKYHCSQSoYgfQoCFAshQIhQlgW7FhIwEJStmEBlB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7c3d3ffffff
Perceptual Hash:b1339accccb33364
Difference Hash:00181c1c16000000
Wavelet Hash:0f0f0307003c3c3c
Color Hash:#6653ac

Other Hashes

Crop Resistant:00181c1c16000000

Scan History

Scan history not available

Unable to load historical scan data