Security Scan: https://wfalerts-srp.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b0a08db8-7673-4310-8b81-5d5aa2d789e3 Domain and IP registration (RDAP)/api/v1/rdap/b0a08db8-7673-4310-8b81-5d5aa2d789e3How often this domain was scanned/api/v1/domain/stats/wfalerts-srp.web.app Scan history for this domain/api/v1/domain/history/wfalerts-srp.web.app?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://wfalerts-srp.web.app/

Effective URL:

https://tdly.info/?pin

Redirected

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Content-free Firebase page with a bank-alert-style hostname that immediately redirects to an unrelated, unranked domain via an opaque '?pin' link; destination unverified. Classic phishing-funnel shape — avoid.

Risk Factors (4)

Deceptive hostname imitating a bank 'alerts' service on a non-bank, free hosting subdomain

Content-free page whose sole function is to redirect to an unrelated, reputation-less domain

Redirect target uses an opaque '?pin' parameter and could not be reached or verified

Free hosting tenant of unknown creation age; no legitimate site identity or content is presented

Safety Factors (5)

No forms of any kind on the submitted page — no credential or payment collection observed

No JavaScript malware patterns, no obfuscated/behavioural JS signals, no third-party scripts

No Indicators of Compromise, no IDS alerts, no known phishing-kit roster match

Destination domain was unreachable; nothing malicious was actually served to the scanner

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'wfalerts-srp.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'wfalerts-srp'. The second-level label 'web' is 3 characters long split between one vowel and 2 consonants. It segments into one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Domain does not exist

There was no DNS record for tdly.info when we scanned it, so there is no screenshot.

Page Load Overview

0.22s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
4	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: wfalerts-srp.web.app