Security Scan Report: garanti-tr.firebaseapp.com

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://garanti-tr.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

Blank Firebase subdomain using the Garanti bank name on a non-official domain, with a single-source phishing report. No forms captured, but the brand-bearing hostname and empty page indicate a phishing staging page — avoid.

Risk Factors (5)
Deceptive hostname impersonating a Turkish banking brand (Garanti) on a non-official firebaseapp.com subdomain
Single-source phishing threat-intel report on the primary domain (unverified)
Empty/near-blank page with generic 'Document' title and no legitimate business content
No reputation ranking; brand-bearing hostname on free instant-publish hosting
Cross-origin XMLHttpRequest to an unranked external host
Domain age information unavailable

Details

Page Title

Document

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'garanti-tr.firebaseapp.com' is registered and includes subdomain 'garanti-tr'. The second-level label 'firebaseapp' is 11 characters long split between five vowels and 6 consonants. Segmentation suggests three words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://garanti-tr.firebaseapp.com/

Page Load Overview

0.26s
Total Load Time
78 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:8 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
213.32.99.13Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
42--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EF1100A18DB6904DA01EC2312CF0F20C8755C840D366CC1475FE612ACECA74748E3AEC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:ntWXyTXi5C055mVt0dHqwDHwlslPHZfVukZuhKWIzynXgMMNF:nzTSr5lKQtZuhvbgvF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:915:AAQAIAAAQBAAAAAAAAQAAAAAAoAAAAAAAAAAAAAACAAAAAAAAAQAAACAACIAAAAAAAAAAAEAAQAIAAAAAABCAAAAAAAIAAgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:e64c993366cc9933
Difference Hash:0000000c08000000
Wavelet Hash:30303c24e0f8fcfc
Color Hash:071c0000000

Other Hashes

Crop Resistant:0000000c08000000

Scan History

Scan history not available

Unable to load historical scan data