Security Scan Report: cloud-ed980.firebaseapp.com

Site favicon
Submitted: Sep 12, 2026, 3:34:34 PMCompleted: Sep 12, 2026, 3:36:15 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 84%

8
Risk Score

Firebase-hosted fake 'verify you are human' page (math CAPTCHA then 'redirect to OneDrive') on a domain corroborated by two threat feeds as 'ek clearfake' exploit-kit/ClearFake malware. No forms, but the page itself is the delivery lure — do not submit the challenge or follow the redirect.

Risk Factors
Multi-source corroborated content-malware threat-intel match (ek clearfake) on the page's primary domain
Fake 'verify you are human' interstitial consistent with ClearFake/ClickFix malware delivery lures
Free hosting-platform subdomain with unknown actual creation date, unranked in Cisco Umbrella
Obfuscation-adjacent crypto API usage in inline scripts (Crypto=3) on a page that should be a static challenge
Domain age information unavailable

Details

Page Title

Redirection

Scan Type

public

Domain Name Analysis

The domain name 'cloud-ed980.firebaseapp.com' uses the commercial generic top-level domain (.com), featuring subdomain 'cloud-ed980'. The registrable portion 'firebaseapp' spans 11 characters containing 5 vowels alongside 6 consonants. Word splitting yields 3 words: fire, base, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cloud-ed980.firebaseapp.com

Page Load Overview

7.57s
Total Load Time
17 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:198 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content49% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
49%
healthcare medical
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1199.36.158.100United States
AS54113Fastly, Inc.
1142.250.154.95Google · CDNUnited States
AS15169Google LLC
44--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F341F18B9D8704433502E9787FF7D7522395910791CACFBA3E9D72A8CF496D498E1388

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hOWZq24ECaz/viuuR2+0HehQNPLYFEHzgzYFF9ct5TXw9YFriJBf0tNVG:DNCa/DdTP8FETVFF9STHFOJBMw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2265:BAAAAQIAAgAACAQgiIAAIIIAABIAAAASUBAJhAgCAAhQEAQIAAAAAoEEAAAhAgAAAACEAgAEAggRAAIAAAQAABAIQJABAQAF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefefefee6e6feff
Perceptual Hash:f7dd887322cc2233
Difference Hash:020202324c4c3208
Wavelet Hash:fcfce0d8c0c8cccc
Color Hash:#87a2c5

Other Hashes

Crop Resistant:020202324c4c3208

Scan History

Scan history not available

Unable to load historical scan data