Security Scan: https://qorhybphtazg.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7667a47a-a63e-438b-9bb1-51efff8f9674 Domain and IP registration (RDAP)/api/v1/rdap/7667a47a-a63e-438b-9bb1-51efff8f9674How often this domain was scanned/api/v1/domain/stats/qorhybphtazg.web.app Scan history for this domain/api/v1/domain/history/qorhybphtazg.web.app?limit=15

This website contacted 2 IPs in 1 country across 3 domains to perform 4 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://qorhybphtazg.web.app/

Effective URL:

https://account-bestatigung-registration.com/tf-kreditkarte

Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

Risk Score

Anonymous Firebase subdomain redirects to account-bestatigung-registration.com/tf-kreditkarte — a 'account confirmation / credit card' lure hostname. Destination unreachable; redirect-gate shape and deceptive naming indicate phishing infrastructure.

Risk Factors (4)

Redirect chain from an anonymous throwaway hosting subdomain to an unrelated domain

Deceptive destination hostname built from account-confirmation + credit-card lure wording

Final destination unreachable — contents unverifiable, consistent with takedown or single-use phishing infrastructure

Destination domain age and reputation unknown; the entry domain's age/reputation cannot be attributed to it

Safety Factors (5)

No threat-intelligence matches against the submitted page or its resources

No JavaScript malware patterns and no network IDS alerts detected

Submitted page has 0 forms, 0 password fields and 0 payment fields (verified from the captured DOM); it is a redirector, not itself collecting data

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'qorhybphtazg.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'qorhybphtazg'. The core label 'web' covers 3 characters holding one vowel versus two consonants. Breaking it apart gives one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Domain does not exist

There was no DNS record for account-bestatigung-registration.com when we scanned it, so there is no screenshot.

Page Load Overview

0.17s

Total Load Time

5 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
4	2	-	-

Detected Technologies3

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: qorhybphtazg.web.app