Security Scan Report: enirvod.firebaseapp.com

Redirected to:
https://search.aipages.dev/en?idm-tlkom.top
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 3 countries across 8 domains to perform 17 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://enirvod.firebaseapp.com/

Effective URL:
https://search.aipages.dev/en?idm-tlkom.top
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Password-gate page on a free firebaseapp.com tenant that disguises its password input, blocks DevTools, evades with Unicode and bounces users to a *.top domain flagged HIGH by IDS. Do not enter any password.

Risk Factors (6)
Password-only collection field (no username) — credential-harvesting pattern
Password input disguised as a plain text field
Unicode/script-confusion evasion in the input
Anti-analysis JavaScript blocking DevTools and view-source
Obfuscated multi-hop redirect into a hit-and-run *.top namespace flagged HIGH by IDS
Phishing threat-intel report against the entry domain (single-source, unverified)
Domain age information unavailable

Details

Page Title

Latest @ Sites

Scan Type

public

Domain Name Analysis

The domain name 'enirvod.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'enirvod'. The registrable portion 'firebaseapp' spans 11 characters containing five vowels alongside six consonants. Splitting it apart reveals 3 words: fire, base, app. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://enirvod.firebaseapp.com/

Page Load Overview

4.80s
Total Load Time
323 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:x-default
Text Length:272 chars
Detector Agreement:100%
Language mismatch: Declared as x-default but detected as en

Website Classification

Primary Category

social media network82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
82%
news media journalism
53%
documentation technical
50%
technology software
46%
healthcare medical
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8172.67.196.251Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1172.67.206.83Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.36.163Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.169.95.124Singapore
143.174.247.36Singapore
1183.240.98.228China
AS56040China Mobile communications corporation
1104.21.15.148Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
143.174.246.36Singapore
114.215.182.140China
AS4134Chinanet
1710--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BEC1D76AAEE54D361367C1C92176FB0CA5B6D40BDA4BC904B1FCB9901FCBFD14813A54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:CdEnw8/0oYIiConyNNyLUJtZenDEKs2gmwj:CdCYoHLb+62hwj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5914:sxHQMhAzMAAIhApQCEIqQgFBYIIACWhIIAKQMGqcCOQLAkEECMgKEAIUoHAAIoglQAJAgMzBzWYrgGQgJ2AUAAAEsABERIYC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818181800
Perceptual Hash:8c4b337666cc9933
Difference Hash:0f3332333332330f
Wavelet Hash:e0d8d9991b1b1f07
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data