Security Scan Report: be4yji.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 1 country across 7 domains to perform 78 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://be4yji.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 82%

9
Risk Score

Obfuscated fake webmail login on a free Firebase subdomain with 40 password fields across 10 forms and a CRITICAL exploit-kit/iFrame-injection IDS alert — a credential-phishing kit. Do not enter any credentials.

Risk Factors (5)
40 password fields across 10 forms harvesting credentials on free shared hosting
Heavily obfuscated content with per-character junk-token injection designed to defeat text scanners
CRITICAL IDS exploit-kit / iframe-injection alert in packed Base64 JavaScript
Free Firebase subdomain with no attributable creation date and no identifiable operator or brand
Page presents a login UI without any legitimate named service to authenticate against
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'be4yji.firebaseapp.com' is registered and includes subdomain 'be4yji'. The registrable portion 'firebaseapp' spans 11 characters with 5 vowels and six consonants. Splitting it apart reveals 3 words: fire, base, app. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://be4yji.firebaseapp.com/

Page Load Overview

2.85s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🏳️SO
Code: so
Confidence:57%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:13,820 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as so

Website Classification

Primary Category

documentation technical82% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
82%
cryptocurrency blockchain
80%
finance banking
80%
healthcare medical
77%
adult content
72%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
6104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
6151.101.65.229Fastly · CDNUnited States
AS54113Fastly, Inc.
6104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.18.40.68Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7813--

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T182D4F9513282BB53130B0BB9734576E1E925CA7CE544898EF169ADA4F1EFE03F9C1272

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:VosanuEyHP/0Lfs7FXYiIFZXt0CFC1jWEPS/1JVIpoBhuJ6Vb5RX26x1:VosanOHP/0Lfs7+iuZXt5FC1jWEPSNJl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:612387:YCAAIQaDlPCspgIx4gYIQQAwCaIBuAGkAZpZciQdASI/gYUYMQS0GzoBAIaOHUGEBJ4hVATKcEgEgGIIBCjAGUQUYkQZEaIE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data