Security Scan: https://moprf-3331cyura.firebaseapp.com/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cae7741a-7054-4dc8-8beb-a3f9c7b81a54 Domain and IP registration (RDAP)/api/v1/rdap/cae7741a-7054-4dc8-8beb-a3f9c7b81a54How often this domain was scanned/api/v1/domain/stats/moprf-3331cyura.firebaseapp.com Scan history for this domain/api/v1/domain/history/moprf-3331cyura.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://moprf-3331cyura.firebaseapp.com/

Effective URL:

https://de.ihrkosten-gehaltskont-erhalten.shop/?pwd=sg

Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

Risk Score

Anonymous Firebase subdomain that only redirects to an unreachable, lure-named German .shop domain. No form or malware was observed, but the redirect chain and deceptive hostname indicate phishing infrastructure.

Risk Factors (4)

Deceptive, lure-style destination hostname combining financial/account wording with a 'de.' prefix and hyphen stuffing

Redirect infrastructure built on a free, anonymous Firebase subdomain with a random identifier

Off-site redirect to an unrelated .shop domain that could not be reached for verification

Destination domain is unranked with unknown registration age

Safety Factors (7)

No threat-intelligence matches against the page or its resources

No JavaScript malware patterns (hunting rule) and no high-precision native hunting-rule hits

No network IDS alerts

No credential exfiltration or cross-origin script behaviour detected

Zero forms, zero password fields and zero payment fields on the submitted page

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'moprf-3331cyura.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 'moprf-3331cyura'. Count 11 characters in 'firebaseapp' holding 5 vowels versus six consonants. Splitting it apart reveals 3 words: fire, base, app. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page did not load

The browser never reached this site, so there is no screenshot of it.

Page Load Overview

0.36s

Total Load Time

1 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
3	1	-	-

Detected Technologies4

Meta-Refresh-Redirect

100%

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: moprf-3331cyura.firebaseapp.com