Summary
API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b3b49757-253a-4415-8dff-598ddec7baadDomain and IP registration (RDAP)/api/v1/rdap/b3b49757-253a-4415-8dff-598ddec7baadHow often this domain was scanned/api/v1/domain/stats/mit-alert01a.web.appScan history for this domain/api/v1/domain/history/mit-alert01a.web.app?limit=15This website contacted 3 IPs in 2 countries across 3 domains to perform 5 HTTP transactions. The main domain is web.app and was registered 7 years ago.
Submitted URL: https://mit-alert01a.web.app/
AI Security Verdict
Confirmed Scam
Confidence: 88%
9
Risk Score
Disposable Firebase redirect page (mit-alert01a.web.app, titled href.li) that forwards visitors to a DuckDNS auth.php endpoint; network IDS flags it as a common credential-theft redirect page. Do not follow the redirect.
Risk Factors (5)
IDS HIGH phishing/credential-theft redirect signature
Redirect to an untrusted DuckDNS auth.php endpoint (credential-harvesting pattern)
Subdomain name crafted as a fake 'MIT alert' lure on a free hosting platform
Use of a third-party redirect-service name (href.li) to obscure the true destination
Instant-subdomain hosting platform with unknown creation date — channel for disposable phishing infrastructure
Domain age information unavailable
Details
Page Title
href.li
Scan Type
public
Domain Name Analysis
The domain name 'mit-alert01a.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'mit-alert01a'. Count 3 characters in 'web' holding 1 vowel versus 2 consonants. Segmentation suggests one word: web. Median word length is three characters. No strong language cues emerged from the frequency lists.
Screenshot
Page Load Overview
75.57s
Total Load Time
N/A
Total Size
Language Analysis
Primary Language
🇺🇸English
Code: enConfidence:100%
Script:Latin
Direction:ltr
Detection Details
Text Length:67 chars
Detector Agreement:100%
Website Classification
Primary Category
news media journalism48% confidence
Type: static
Method: ml+structural
All Detected Categories
news media journalism
48%
healthcare medical
41%
e-commerce shopping
38%
social media network
37%
government public service
36%
Detected Features
No structural features detected
Domain & IP Information
| Requests | IP Address | Location | AS Autonomous System |
|---|---|---|---|
| 3 | 199.36.158.100Fastly · CDN | United States | AS54113Fastly, Inc. |
| 1 | 192.0.78.27 | San Francisco, California, United States | AS2635Automattic, Inc |
| 1 | 45.83.122.123 | British Virgin Islands | AS57043Hostkey B.v. |
| 0 | 3 | - | - |
Detected Technologies1
Content Similarity HashesFor malware variant detection
Image Hashes
Perceptual Hashes
Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A
Other Hashes
Crop Resistant:N/A
Scan History
Scan history not available
Unable to load historical scan data