Security Scan Report: atuokwxfm.firebaseapp.com

Redirected to:
https://www.consorsbank.de/home
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 4 countries across 4 domains to perform 112 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://atuokwxfm.firebaseapp.com/

Effective URL:
https://www.consorsbank.de/home
Redirected

AI Security Verdict

Low Risk

Confidence: 68%

2
Risk Score

Odd Firebase subdomain redirected to the real, established Consorsbank site; the landing page is a bank bot-check with no impersonation, no harvesting form, and no threat-intel, hunting rule or IDS hits. Benign, but reach the bank directly rather than via unknown redirectors.

Risk Factors (2)
Entry point was an opaque, unranked Firebase hosting subdomain (atuokwxfm.firebaseapp.com) of unknown creation date whose purpose for redirecting to a bank is not explained by the captured page
Captured content is a bot-protection interstitial rather than the bank's real page, so the visible content could not be fully reviewed
Safety Factors (4)
Redirect terminates on the brand owner's own established domain (www.consorsbank.de), which settles the brand question
No credential-harvesting form on the entry page; the observed login form belongs to the bank and submits to consorsbank.de
No Indicators of Compromise, hunting rule malware patterns, known-kit matches, or network IDS alerts
Third-party script contact limited to a ranked consent-management host (privacy.trustcommander.net)
Domain age information unavailable

Details

Page Title

Warten Sie Mal

Scan Type

public

Domain Name Analysis

The domain name 'atuokwxfm.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'atuokwxfm'. The second-level label 'firebaseapp' is 11 characters long split between 5 vowels and 6 consonants. Splitting it apart reveals three words: fire, base, app. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://atuokwxfm.firebaseapp.com/

Page Load Overview

1.75s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:14 chars
Detector Agreement:0%

Website Classification

Primary Category

finance banking45% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1823.36.162.218Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1813.37.23.48Aws · CLOUDParis, Île-de-France, France
AS16509Amazon.com, Inc.
182.18.244.15Akamai · CDNSchiphol, North Holland, Netherlands
AS20940Akamai International B.V.
182.18.244.16Akamai · CDNSchiphol, North Holland, Netherlands
AS20940Akamai International B.V.
1851.45.52.229Aws · CLOUDParis, Île-de-France, France
AS16509Amazon.com, Inc.
1126--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T115D0228728F2880269B1E9440DF6F3687CE701EB41C0CA407ACCB1542F283ABC80B9A8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:PouVWJhq8zvYl/UvNEXUrA3OI//AOSV8SLGCINveljNGXIL0NhtvxL3+Kqz:h4hq87Y2uXUU6VDLGCgIz4NhdxKKqz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:b5ca51c4419996d9cfcd1a34f538ed9b

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f8f8f8fe7c3f3ff
Perceptual Hash:be1fc0e1c30f27c8
Difference Hash:7b373f792f8e263a
Wavelet Hash:8b83838783c3c3df
Color Hash:#741f93

Scan History

Scan history not available

Unable to load historical scan data