Security Scan: szjhbeugfjejykhzkhgeuhjk-gisoje1896737053.cod

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b89f2af5-dc55-45b3-864b-77a96ec94521 Domain and IP registration (RDAP)/api/v1/rdap/b89f2af5-dc55-45b3-864b-77a96ec94521How often this domain was scanned/api/v1/domain/stats/track-id8982.web.app Scan history for this domain/api/v1/domain/history/track-id8982.web.app?limit=15

This website contacted 3 IPs in 1 country across 3 domains to perform 6 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://track-id8982.web.app/

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Confirmed phishing entry point: an analyst-vetted Firebase-to-Codeanywhere redirect stub from a known banking/tax phishing kit family. The destination container is currently offline, but the stub itself is malicious infrastructure.

Risk Factors (4)

Known malicious phishing kit family identified by the vetting roster (Firebase → Codeanywhere redirect chain)

Bare meta-refresh redirect stub with no legitimate content, named after its container target

Brandless, throwaway hosting subdomain consistent with disposable phishing entry points

Redirect destination container is unreachable/suspended, a common state for abused dev containers

Domain age information unavailable

Details

Page Title

szjhbeugfjejykhzkhgeuhjk-gisoje1896737053.codeanyapp.comother network

Scan Type

public

Domain Name Analysis

Domain 'track-id8982.web.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'track-id8982'. Its registrable label 'web' stretches across 3 characters containing one vowel alongside two consonants. Tokenizing the label suggests 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

N/A

Total Load Time

1 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:864 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software71% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

71%

documentation technical

43%

adult content

34%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	151.101.0.64Fastly · CDN	United States	AS54113Fastly, Inc.
2	198.199.109.95	San Francisco, California, United States	AS14061DigitalOcean, LLC
0	3	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T133048F773296063986558498E05B830D9F20B543F506C97CB9BCBAD8BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:v/Qho9PKBbl8Vrq9Jzbs6tlg1ySBKw4Q9gcoIsPP2bMy8Old5:ghoCl8Bqzzbs6okSCggcpsH2eA7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:188319:ogUxwrDo7HRMgAyEEBSuB+NAWsBBEIMwYAQ3PLAoAUCApjABoDU8MAESAgAsRkGJcAJRiKSheAkOQ4Zh0dktihAZKG1odAXC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc3c3d3ffffff

Perceptual Hash:b1319eccccb33364

Difference Hash:00181c1c16000000

Wavelet Hash:3c1c0004c0fcfcfc

Color Hash:#2d4686

Other Hashes

Crop Resistant:00181c1c16000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: track-id8982.web.app