Security Scan: Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a2a74213-b00f-44fd-8b6a-0d198ec5570b Domain and IP registration (RDAP)/api/v1/rdap/a2a74213-b00f-44fd-8b6a-0d198ec5570bHow often this domain was scanned/api/v1/domain/stats/re-register-user-login.firebaseapp.com Scan history for this domain/api/v1/domain/history/re-register-user-login.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://re-register-user-login.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Firebase-hosted page matches an analyst-vetted UK mobile 'account recovery' phishing kit and fires a CRITICAL cloaking YARA rule; the empty 'Cloak' shell suggests the lure is served selectively. Treat as malicious.

Risk Factors (4)

Identified as a known credential-phishing kit by an analyst-vetted kit roster

CRITICAL high-precision YARA hit for a UK mobile/bank account-recovery cloaking kit

Cloaking behaviour: the visible page is a near-empty 'Cloak' shell, indicating the real lure is conditionally served

Free firebaseapp.com subdomain with an unranked/unknown-reputation hostname and no published creation date

Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Favicon Hash

MMH3: 1791640551

MD5: e03758dabc4f015f57e236cdc9a00875

Domain Name Analysis

Domain 're-register-user-login.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 're-register-user-login'. The registrable portion 'firebaseapp' spans 11 characters with 5 vowels and 6 consonants. Splitting it apart reveals three words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.