ScanMalware.com

Security Scan Report: review-d4b2d.firebaseapp.com

Redirected to:
https://khananistore.com/cgi-bin2/?CaseId=02468322
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c420bf45-252e-4179-89f2-4fd2c3d8bb47Domain and IP registration (RDAP)/api/v1/rdap/c420bf45-252e-4179-89f2-4fd2c3d8bb47How often this domain was scanned/api/v1/domain/stats/review-d4b2d.firebaseapp.comScan history for this domain/api/v1/domain/history/review-d4b2d.firebaseapp.com?limit=15
This website contacted 7 IPs in 2 countries across 7 domains to perform 279 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://review-d4b2d.firebaseapp.com/

Effective URL:
https://khananistore.com/cgi-bin2/?CaseId=02468322
Redirected

AI Security Verdict

Moderate Risk

Confidence: 58%

5
Risk Score

Shopify storefront reached via a Firebase redirect; it is the store's own 404 page with its own customer login. No impersonation, malware or threat-intel hits, but unknown domain age and prepay pressure warrant caution.

Risk Factors (5)
Domain age for khananistore.com is unknown and the domain is unranked in Cisco Umbrella, so there is no reputation history for the actual storefront.
Cryptic cross-domain redirect from a disposable Firebase subdomain into a path like /cgi-bin2/?CaseId=02468322 — a redirect pattern frequently used to funnel traffic, though the landing page is a genuine Shopify 404.
Page text pushes prepayment ('COD orders carry a 4% govt. tax. Pay in advance to avoid charges', 'Order above Rs.20,000 will be delivered after online payment'), an advance-payment pressure tactic common on unverified storefronts.
Low automated legitimacy score (8/100) despite a footer contact address and phone number.
Login modal renders a password field that is present in the DOM but not visible in the screenshot (consistent with a standard Shopify modal, but unverified here).
Safety Factors (4)
Forms are the platform's own Shopify search, newsletter and customer-authentication forms on the store's own domain; no cross-origin credential submission.
No Indicators of Compromise, no Google Safe Browsing-style malware/phishing hit, no JavaScript malware pattern, no known-kit match.
No payment card or CVV collection observed on the captured page (payment fields = 0).
Contact details (phone, email) and a designed storefront with product categories are present; branding is self-consistent with the domain.
Domain age information unavailable

Details

Page Title

404 Not Found – Khanani Store

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'review-d4b2d.firebaseapp.com' is registered, featuring subdomain 'review-d4b2d'. The second-level label 'firebaseapp' is 11 characters long holding 5 vowels versus 6 consonants. Tokenizing the label suggests three words: fire, base, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://review-d4b2d.firebaseapp.com/

Page Load Overview

0.79s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,997 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network91% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
91%
entertainment media
70%
e-commerce shopping
46%
corporate
35%
government public service
34%

Detected Features

Login Form
Search
Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
45199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
3923.227.38.65Cloudflare · CDNOttawa, Ontario, Canada
AS13335Cloudflare, Inc.
3934.144.250.199Google · CDNKansas City, Missouri, United States
AS396982Google LLC
39104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3934.160.147.240Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3934.128.177.21Google · CDNKansas City, Missouri, United States
AS396982Google LLC
39104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2797--

Detected Technologies10

X-UA-Compatible
100%
Shopify
100%
PasswordField
100%
Open-Graph-Protocolvwebsite
100%
HTTP/3
40%
HSTS
40%
Firebase
40%
reCAPTCHA
30%
hCaptcha
30%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14C645C62F43411790517472AFAABFA857124B14BD301C5E4F9EC832C7F89ED589E3A8E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:9s89JrjQg3k02hrLAbkvlIZULdiAN9wO/kaZqPM1D6WUhlFZq4IxYnWTpe+TpMO6:0dLdv9wO/ka7UhlFZq4IxYEMO6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:336449:AoIFMAGfSjiJxVagZG4BY7iIVaiAwICgMAogBOAsauRApEAJCiRMAJGIISDIRRhgXoaCTCJAMAAEAyCCLLV0AgMsQMHMAsZQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000ffffffff0000
Perceptual Hash:8add08dd22769c76
Difference Hash:b3f14c4c4c30292b
Wavelet Hash:0000ffffffff0000
Color Hash:#bf409f

Other Hashes

Crop Resistant:b3f14c4c4c30292b,82b282ba9a8aa282,6969b3b2b20f6969,c1222a4a2b292aca

Scan History

Scan history not available

Unable to load historical scan data