Security Scan Report: office2rdr2026.firebaseapp.com

Redirected to:
https://stratland.com.au/wp-content/maintenance/assets/fonts/online.ac...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 6 domains to perform 35 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://office2rdr2026.firebaseapp.com/

Effective URL:
https://stratland.com.au/wp-content/maintenance/assets/fonts/online.ac...
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Compromised WordPress site and a Firebase subdomain flagged for phishing chain into a fake 'Active8me Payment Update' document lure; brand impersonation with no legitimate Active8me relationship. Avoid.

Risk Factors (5)
Phishing indicator of compromise on the entry domain office2rdr2026.firebaseapp.com
Impersonation of the Active8me brand on an unrelated, third-party domain
Compromised WordPress installation abused to host the phishing lure (wp-content path with brand-laden directory names)
Cross-domain redirect chain from a free Firebase app subdomain to a hacked WordPress site
Content served selectively to residential clients while scanner saw a 'Page not found' page
Domain age information unavailable

Details

Page Title

Active8meother network

Scan Type

public

Domain Name Analysis

The domain name 'office2rdr2026.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'office2rdr2026'. The second-level label 'firebaseapp' is 11 characters long containing 5 vowels alongside 6 consonants. Breaking it apart gives 3 words: fire, base, app. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Active8me Payment Update Opening your document... ~~

Page Load Overview

0.19s
Total Load Time
668 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:57 chars
Detector Agreement:71%

All Detected Languages

🇫🇷fr(63%)🇺🇸en(37%)

Website Classification

Primary Category

technology software80% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
80%
finance banking
71%
cryptocurrency blockchain
43%
news media journalism
37%
government public service
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26110.232.143.100Brisbane, Queensland, Australia
AS45638SYNERGY WHOLESALE PTY LTD
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5142.251.14.97Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2216.239.32.36Google · CDNUnited States
AS15169Google LLC
357--

Detected Technologies17

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1325166E644E0109160F3C3F13BA231096152D0A7E54BD590769C1608DFDAF975EB738E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TRnqyzQaKzQ/YN9jvI7xWX3+pf3p1At2NqKUq2T/XV:TRt0aK0Aj07QXOp/4c3kF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2467:AIAACgAQYQAAAAQAgAApBAACCAIACkAAQAAAAJAABCAoAAIAhAAJAQCAEJAgACAQEABAAIAEBIAAARAAAIAkAAAEgABAEhgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:db746c5873724c58
Difference Hash:0044300828300800
Wavelet Hash:00fffcc0d8c0f0f0
Color Hash:070000001c0

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data