Summary
API
Submitted URL: https://toll-2d8.firebaseapp.com/
AI Security Verdict
Confirmed Scam
Confidence: 90%
Throwaway Firebase page matching an analyst-vetted phishing kit (Firebase→Codeanywhere redirect family used for toll, bank, customs and tax phishing). The stub itself has no forms; it exists only to forward victims to off-site phishing content.
Risk Factors (4)
Details
Page Title
port-3000-98743980-lasybug6855273.codeanyapp.comother network
Scan Type
public
Domain Name Analysis
The domain name 'toll-2d8.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'toll-2d8'. Count 11 characters in 'firebaseapp' split between five vowels and 6 consonants. Splitting it apart reveals 3 words: fire, base, app. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.
Screenshot

Page Load Overview
Domain & IP Information
| Requests | IP Address | Location | AS Autonomous System |
|---|---|---|---|
| 2 | 199.36.158.100Fastly · CDN | United States | AS54113Fastly, Inc. |
| 2 | 198.199.109.95 | San Francisco, California, United States | AS14061DigitalOcean, LLC |
| 4 | 2 | - | - |
Detected Technologies4
Content Similarity HashesFor malware variant detection
Image Hashes
Perceptual Hashes
Other Hashes
Scan History
Scan history not available
Unable to load historical scan data