Security Scan: o2

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/88143ed1-c2ac-4797-9279-2390cc650007 Domain and IP registration (RDAP)/api/v1/rdap/88143ed1-c2ac-4797-9279-2390cc650007How often this domain was scanned/api/v1/domain/stats/o2-billing-recovery.firebaseapp.com Scan history for this domain/api/v1/domain/history/o2-billing-recovery.firebaseapp.com?limit=15

This website contacted 6 IPs in 1 country across 6 domains to perform 24 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://o2-billing-recovery.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Firebase-hosted O2 'billing recovery' page matches an analyst-vetted UK carrier phishing kit (CRITICAL YARA hit); brand impersonation plus cloaked, country-gated lure — do not enter any details.

Risk Factors (6)

Known malicious phishing kit identified by analyst-vetted roster (UK mobile account-recovery kit)

CRITICAL YARA hit for UK_Mobile_Recovery_OwnerInfo_Cloak_Kit

Brand impersonation of UK carrier O2 on an unrelated firebaseapp.com subdomain

Deceptive, brand-infixed hostname combining 'o2', 'billing' and 'recovery'

Cloaking behaviour: single-page app with country/device-gated lure content

Domain unranked in Cisco Umbrella while claiming a major brand's service

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -1851586184

MD5: 31f657978377508585fc99a95b8d825e

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'o2-billing-recovery.firebaseapp.com' is registered, featuring subdomain 'o2-billing-recovery'. The core label 'firebaseapp' covers 11 characters with 5 vowels and 6 consonants. Word splitting yields three words: fire, base, app. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.66s

Total Load Time

1.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
4	104.26.9.44Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.67.69.226Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	192.178.183.94Google · CDN	United States	AS15169Google LLC
4	142.251.13.94Google · CDN	United States	AS15169Google LLC
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
24	6	-	-