Security Scan Report: delivery-6dd56.firebaseapp.com

Redirected to:
https://delivery-service.x8495-buisnesswork.store/s306verification.php
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://delivery-6dd56.firebaseapp.com/

Effective URL:
https://delivery-service.x8495-buisnesswork.store/s306verification.php
Redirected

AI Security Verdict

High Risk

Confidence: 76%

8
Risk Score

Firebase subdomain with an unverified phishing report redirects to a random .store host serving a fake 'verifying you are human' gate; content is cloaked from datacenter scanners — a classic phishing-kit entry point.

Risk Factors (5)
Single-source threat-intelligence report of phishing on the entry domain
Redirect from Firebase hosting to an unrelated random .store domain with a .php endpoint
Fake human-verification / browser-check gate typical of phishing kits
Scanner-vs-client content mismatch indicating deliberate bot filtering
Unknown-age hosting-platform subdomain; the apex age is not attributable to this page
Domain age information unavailable

Details

Page Title

Checkingother network

Scan Type

public

Domain Name Analysis

The domain 'delivery-6dd56.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'delivery-6dd56'. The registrable portion 'firebaseapp' spans 11 characters with 5 vowels and six consonants. Segmentation suggests 3 words: fire, base, app. Median word length is 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Checking your browser... Verifying you are human. This may take a few seconds.

Page Load Overview

0.38s
Total Load Time
3 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:87 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical53% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
53%
technology software
45%
healthcare medical
44%
news media journalism
41%
adult content
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1142.251.13.138Google · CDNUnited States
AS15169Google LLC
1142.251.150.119Google · CDNUnited States
AS15169Google LLC
43--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A961401DA4F624067B13E1A40EDBB20827368007968DCF5ABE9F5390DF47154C2A77CE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:Ntmp/XCieX+F03ZdGpH9WC1wHrlJJO+svE:Ntmp/XCieX+G3ZdG2LDJO+6E

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3383:QEAAAKkgIBAAAJAAIgAEAAGAQEJACJCQEAAIBAABACBcSHKCEISAAFgACQBBEgGEEBBABkQAAACYAQBSQAAEAAAggAwACAAO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefee6e6fefefe
Perceptual Hash:f5cc8c3333cc8c33
Difference Hash:0008000c0c000800
Wavelet Hash:3e3e3e26262e3232
Color Hash:07038000000

Other Hashes

Crop Resistant:0008000c0c000800

Scan History

Scan history not available

Unable to load historical scan data