Security Report: csbim-connect.web.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/77b1fe5c-bf46-4dfe-85e2-4329ddac3da5 Domain and IP registration (RDAP)/api/v1/rdap/77b1fe5c-bf46-4dfe-85e2-4329ddac3da5 Certificate Transparency/api/v1/ct/csbim-connect.web.app How often this domain was scanned/api/v1/domain/stats/csbim-connect.web.app Scan history for this domain/api/v1/domain/history/csbim-connect.web.app?limit=15

This website contacted 10 IPs in 1 country across 5 domains to perform 58 HTTP transactions. The main domain is csbim-connect.web.app and was registered 29 years ago.

Submitted URL: https://csbim-connect.web.app/

Effective URL:

https://csbim-connect.web.app/Login

Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Self-branded CSBIM CONNECT login on a shared Firebase host. No impersonation, no Indicators of Compromise, no YARA/IDS hits and a same-origin form only. Risk stems from unknown-age shared hosting plus a password field — moderate, not phishing.

Risk Factors (3)

Unranked domain on a free/instant shared-hosting namespace (.web.app) where the page's own creation date cannot be determined

Login page that collects an email address and password, so any compromise of the site would directly expose user credentials

Three Function() constructor calls in JavaScript (dynamic code generation) — a weak, non-specific signal common to bundled frameworks such as Next.js

Safety Factors (4)

Clear self-branding: page title, meta description and footer ('CSBIM') match the scanned domain — no impersonation of a different organisation

Login form posts same-origin within csbim-connect.web.app; no cross-origin credential submission or credential exfiltration observed

No Indicators of Compromise, no JavaScript malware patterns, no vetted phishing-kit signatures and no network IDS alerts

Third-party OAuth buttons (Google, Facebook, Microsoft) reference legitimate sign-in providers rather than mimicking their login pages

Domain age information unavailable

Details

Page Title

CONNECT | Login

Scan Type

public

Favicon Hash

MMH3: 355802126

MD5: 525a993314e9cf74c7dfe2e95aa75e1c

Domain Name Analysis

The domain 'csbim-connect.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'csbim-connect'. The registrable portion 'web' spans 3 characters with 1 vowel and 2 consonants. Splitting it apart reveals 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.07s

Total Load Time

2.1 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:229 chars

Detector Agreement:67%

Website Classification

Primary Category

social media network98% confidence

Type: spa

Method: ml+structural

All Detected Categories

social media network

98%

finance banking

59%

technology software

54%

government public service

38%

adult content

37%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
13	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
5	142.251.150.119Google · CDN	United States	AS15169Google LLC
5	142.250.154.94Google · CDN	United States	AS15169Google LLC
5	142.251.153.119Google · CDN	United States	AS15169Google LLC
5	192.178.183.94Google · CDN	United States	AS15169Google LLC
5	142.251.156.119Google · CDN	United States	AS15169Google LLC
5	142.251.13.94Google · CDN	United States	AS15169Google LLC
5	142.251.152.119Google · CDN	United States	AS15169Google LLC
5	172.217.116.4Google · CDN	United States	AS15169Google LLC
5	142.251.151.119Google · CDN	United States	AS15169Google LLC
58	10	-	-