Security Scan: idm-tlkom.top

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7cdd0af3-4ee4-45ec-a25a-c174757db0e3 Domain and IP registration (RDAP)/api/v1/rdap/7cdd0af3-4ee4-45ec-a25a-c174757db0e3How often this domain was scanned/api/v1/domain/stats/finlesuvr.firebaseapp.com Scan history for this domain/api/v1/domain/history/finlesuvr.firebaseapp.com?limit=15

This website contacted 23 IPs in 7 countries across 11 domains to perform 22 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://finlesuvr.firebaseapp.com/

Effective URL:

https://online-app-deqzgal1.idm-tlkom.top/cb/?pwd=indx

Redirected

AI Security Verdict

Moderate Risk

Confidence: 72%

Risk Score

Redirect chain lands on an expired, ad-monetized .top lookalike domain flagged by HIGH-severity IDS rules. No credential forms on this page, but the chain and host are untrustworthy — do not click through.

Risk Factors (5)

Cross-domain redirect from a Firebase subdomain to an unrelated, randomly-named .top host

Expired/parked domain landing page monetized with third-party search ads

HIGH-severity network IDS alerts flagging the *.top domain as likely hostile

INFO ET PHISHING redirect heuristic fired on the navigation chain

Deceptive lookalike domain name (idm-tlkom.top / tdm-tlkom.top)

Safety Factors (5)

No forms at all — password, payment and email field counts are zero, so no credential harvesting was observed

No hunting rule JavaScript malware patterns and no known-kit roster match

No cross-origin credential exfiltration detected

Third-party scripts are top-ranked public CDNs/analytics

No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

idm-tlkom.topother network

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'finlesuvr.firebaseapp.com' is registered, featuring subdomain 'finlesuvr'. The core label 'firebaseapp' covers 11 characters split between five vowels and 6 consonants. Breaking it apart gives 3 words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.19s

Total Load Time

299 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:62%

Script:Latin

Direction:ltr

Detection Details

Text Length:112 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software37% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

37%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	103.224.182.90	San Diego, California, United States	AS133618Trellian Pty. Limited
0	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
0	103.224.212.142	Australia	AS133618Trellian Pty. Limited
0	54.192.35.85Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
0	18.204.240.1Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
0	185.111.111.157	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
0	87.248.119.252	United Kingdom	AS203220Yahoo-UK Limited
0	63.32.180.52Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
0	34.243.127.89Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
0	185.111.111.158	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
22	23	-	-