Security Scan: EE

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8a0d8f6a-052c-4d8f-bfa7-e59b658cd4aa Domain and IP registration (RDAP)/api/v1/rdap/8a0d8f6a-052c-4d8f-bfa7-e59b658cd4aaHow often this domain was scanned/api/v1/domain/stats/ee-repayment-update.firebaseapp.com Scan history for this domain/api/v1/domain/history/ee-repayment-update.firebaseapp.com?limit=15

This website contacted 64 IPs in 3 countries across 52 domains to perform 320 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://ee-repayment-update.firebaseapp.com/

Effective URL:

https://ee.co.uk/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Firebase subdomain uses EE's name and a 'repayment' lure and matched an analyst-vetted UK carrier phishing kit (critical hunting rule, cloak-gated to UK phones); the benign EE page seen is the decoy branch. Treat as phishing.

Risk Factors (5)

Known malicious phishing kit identified by vetted roster and high-precision hunting rule (designed for UK carrier/bank credential and card theft)

Deceptive hostname impersonating EE (UK mobile carrier) with a 'repayment update' pretext on a non-EE domain

Content cloaking: kit shows a benign/decoy page to non-target visitors and the lure only to UK mobile users

Free/shared hosting platform subdomain with unknown, unverifiable creation date

Bot-protection/challenge divergence between scanner and real client content consistent with evasion

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -1275292909

MD5: d305fe9e943bf60cafac9e56c34b844c

Domain Name Analysis

You're looking at domain 'ee-repayment-update.firebaseapp.com' on the commercial generic top-level domain (.com), featuring subdomain 'ee-repayment-update'. Its registrable label 'firebaseapp' stretches across 11 characters containing 5 vowels alongside six consonants. Segmentation suggests 3 words: fire, base, app. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.77s

Total Load Time

11.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:13 chars

Detector Agreement:0%

Website Classification

Primary Category

technology software66% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

66%

entertainment media

55%

corporate business

45%

documentation technical

45%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
5	45.60.65.23Incapsula · WAF	United States	AS19551Incapsula Inc
5	142.251.20.94Google · CDN	United States	AS15169Google LLC
5	142.251.156.120Google · CDN	United States	AS15169Google LLC
5	45.60.72.23Incapsula · WAF	United States	AS19551Incapsula Inc
5	23.37.193.84Akamai · CDN	Berlin, State of Berlin, Germany	AS16625Akamai Technologies, Inc.
5	104.18.1.97Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.18.32.137Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.14.97Google · CDN	United States	AS15169Google LLC
5	34.107.184.205Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
320	64	-	-