ScanMalware.com

Security Scan Report: dropper-refactor-staging.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7fbdcaa9-9ee2-4056-9e30-1f492f46f88eDomain and IP registration (RDAP)/api/v1/rdap/7fbdcaa9-9ee2-4056-9e30-1f492f46f88eHow often this domain was scanned/api/v1/domain/stats/dropper-refactor-staging.firebaseapp.comScan history for this domain/api/v1/domain/history/dropper-refactor-staging.firebaseapp.com?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://dropper-refactor-staging.firebaseapp.com/

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Unknown-age Firebase subdomain offering a crypto wallet creation/import flow, but no forms, credential fields, Indicators of Compromise or YARA hits were found. Only a generic CRITICAL IDS alert; treat as unverified and avoid entering seed phrases or keys.

Risk Factors (4)
Wallet/crypto-asset creation flow on an unknown-age, unranked shared Firebase subdomain
Subdomain naming ('dropper-refactor-staging') suggests throwaway staging infrastructure atypical of a production wallet service
CRITICAL network IDS alert on the session (generic web-client memory-corruption probe)
No published creation date for the actual subdomain hosting the content
Safety Factors (5)
No credential, login or payment form present (0 forms, 0 password fields, 0 payment fields)
No Indicators of Compromise or threat-intelligence matches
No JavaScript YARA malware patterns and no known malicious kit in the analyst-vetted roster
No credential exfiltration or cross-origin form submission detected
Brand shown ('KNOBS') is the site's own self-branding; no third-party brand impersonation
Domain age information unavailable

Details

Page Title

Onboarding | Wallet KNOBSother network

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'dropper-refactor-staging.firebaseapp.com' is registered with subdomain 'dropper-refactor-staging'. Count 11 characters in 'firebaseapp' with five vowels and six consonants. Tokenizing the label suggests three words: fire, base, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dropper-refactor-staging.firebaseapp.com/

Page Load Overview

1.03s
Total Load Time
907 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:12 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
2142.250.154.95Google · CDNUnited States
AS15169Google LLC
52--

Detected Technologies3

HTTP/3
40%
HSTS
40%
Firebase
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T134A2C3ED1B2803ECED4BC2E7EE6151897D1B206BE4C58AB0C75DDFA4768E4D8CD82512

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:2d6p/KyniJU2jE1Ek7Qoxh2ph2aEE8Bd7VVJekEpEVK:LSm1xE8BXG/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23056:OeiiEYVlQARQQBoOEA5UDJEesIgHAIUwEWJIuDgRNggCxgkEIWODyZEMRSwQoCDEAFoAQNJYcHLTQaMKWYQYgIQ4nCUWuBAD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:800018180000ffff
Perceptual Hash:dc78f27258d858e2
Difference Hash:31a8b0b28c308ab2
Wavelet Hash:80183838043cffff
Color Hash:#862d5b

Other Hashes

Crop Resistant:0280828488808280,0010080c0c100000,31a8b0b28c308ab2

Scan History

Scan history not available

Unable to load historical scan data