Security Scan Report: 9000-firebase-verify-1781672856551.cluster-axf5tvtfjjfekvhwxwkkkzsk2y.cloudworkstations.dev

Submitted: Sep 6, 2026, 2:42:05 AMCompleted: Sep 6, 2026, 2:43:25 AMpubliccompleted

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is 9000-firebase-verify-1781672856551.cluster-axf5tvtfjjfekvhwxwkkkzsk2y.cloudworkstations.dev and was registered 4 years 7 months ago.

Submitted URL: https://9000-firebase-verify-1781672856551.cluster-axf5tvtfjjfekvhwxwkkkzsk2y.cloudworkstations.dev/?monospaceUid=60356#[[-Email-]]

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Page hosts a credential‑phishing login that exfiltrates data to an external server; treat as high‑risk.

Risk Factors
Credential exfiltration to external server
Unranked / unknown‑age domain
Login form collecting credentials
Cross‑origin request combined with credential handling
Domain age information unavailable

Details

Page Title

Mail

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

news media journalism

(26%)

Domain Information

Domain '9000-firebase-verify-1781672856551.cluster-axf5tvtfjjfekvhwxwkkkzsk2y.cloudworkstations.dev' uses the developer-focused generic top-level domain (.dev) with subdomain '9000-firebase-verify-1781672856551.cluster-axf5tvtfjjfekvhwxwkkkzsk2y'. The registrable portion 'cloudworkstations' spans 17 characters containing six vowels alongside eleven consonants. Tokenizing the label suggests two words: cloud, workstations. Average segment length settles at 8.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of 9000-firebase-verify-1781672856551.cluster-axf5tvtfjjfekvhwxwkkkzsk2y.cloudworkstations.dev

Page Load Overview

0.37s
Total Load Time
2
HTTP Requests
1
Domains
0 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:69 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism26% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
26%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2136.110.210.51Google · CDNKansas City, Missouri, United States
AS396982Google LLC
21--

Page Statistics

2
Requests
1
Unique Domains
4.6 KB
Total Size

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D3D177871563085066A7E1FC37E767053164C013AE4AC824BF5CA39C8F4AEA6D8B33CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:Vrl/+rNFMEFpF/9OAjuFiLi3iebUARn2iQuriyu4/:Vr6FMEFpFSFiLi3i0UAYiQ6iyb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6323:XIIA4BIAIaIaJJEqJkRgACKAAAJIkGiEEp9AsYANlQQwAAwRABAQgABBRICSAFAEHAoAYglSEbkAEQElAAIGMEwCNQWIQEhE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7c3c3e7ffff
Perceptual Hash:b389cc6633996666
Difference Hash:00000c140c0c0008
Wavelet Hash:f0f0e4e404043c3c
Color Hash:#ce79d2

Other Hashes

Crop Resistant:00000c140c0c0008

Scan History

Scan history not available

Unable to load historical scan data