Security Scan: https://toll-9d2i.firebaseapp.com/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/795d4af5-8c06-467a-acba-dd45ef29fd2d Domain and IP registration (RDAP)/api/v1/rdap/795d4af5-8c06-467a-acba-dd45ef29fd2dHow often this domain was scanned/api/v1/domain/stats/toll-9d2i.firebaseapp.com Scan history for this domain/api/v1/domain/history/toll-9d2i.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is davegroup.in.

Submitted URL: https://toll-9d2i.firebaseapp.com/

Effective URL:

https://davegroup.in/wp-admin/js/widgets/css/-/

Redirected

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Empty Firebase subdomain that bounces visitors to an unrelated domain at a fake WordPress system path (/wp-admin/js/widgets/css/-/) — a classic hijacked-WordPress redirect/cloaking shape. No forms or malware were observed, but the redirect chain should not be followed.

Risk Factors (4)

Free instant-provisioning hosting subdomain used purely as a redirect hop to a third-party domain

Fabricated/mimicked WordPress system path on the destination (wp-admin/js/widgets/css/-/) typical of hijacked-WordPress cloaking directories

Destination domain unrelated to the entry host and unreachable for verification

No legitimate reason for a Firebase app to bounce visitors into another site's WordPress admin scripts tree

Safety Factors (5)

No forms, password fields, or payment fields on the submitted page (verified form facts: 0/0/0)

No JavaScript malware patterns detected by hunting rule

No threat-intelligence matches against the page or its resources

No IDS alerts and no cross-origin credential exfiltration detected

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'toll-9d2i.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'toll-9d2i'. The core label 'firebaseapp' covers 11 characters containing 5 vowels alongside six consonants. Splitting it apart reveals three words: fire, base, app. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Domain does not exist

There was no DNS record for davegroup.in when we scanned it, so there is no screenshot.

Page Load Overview

0.36s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
4	1	-	-

Detected Technologies5

Meta-Refresh-Redirect

100%

40%

40%

40%

25%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: toll-9d2i.firebaseapp.com