ScanMalware.com

Security Scan Report: deeluxeetorolh.firebaseapp.com

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d0195d4c-8b96-4edc-bb49-7c2c952e0644Domain and IP registration (RDAP)/api/v1/rdap/d0195d4c-8b96-4edc-bb49-7c2c952e0644How often this domain was scanned/api/v1/domain/stats/deeluxeetorolh.firebaseapp.comScan history for this domain/api/v1/domain/history/deeluxeetorolh.firebaseapp.com?limit=15
This website contacted 15 IPs in 4 countries across 18 domains to perform 72 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://deeluxeetorolh.firebaseapp.com/

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

Anonymous Firebase subdomain wearing a 'HeadlineLogic' news-portal identity, with login/signup password fields in the markup and requests to a .top domain flagged hostile by IDS. Avoid entering credentials.

Risk Factors (5)
Brand name ('HeadlineLogic') displayed on an unrelated, anonymous cloud-hosting subdomain
Credential-entry fields (login and signup with password inputs) present in the served markup
Page contacts a .top domain that network IDS flagged as likely hostile (2 HIGH alerts)
Unknown subdomain age on a shared platform where anyone can publish instantly
Parked/aggregator-style template with low-quality scraped-looking content and garbled visible text
Safety Factors (7)
No Indicators of Compromise matched against the page or its resources
No JavaScript malware patterns or high-precision native hunting-rule hits
No known malicious kit in the analyst-vetted roster
No credential exfiltration and no cross-origin form submission detected
Terms/privacy pages are linked
No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5
Domain age information unavailable

Details

Page Title

HeadlineLogic News Portalother network

Scan Type

public

Domain Name Analysis

The domain name 'deeluxeetorolh.firebaseapp.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'deeluxeetorolh'. The second-level label 'firebaseapp' is 11 characters long holding 5 vowels versus six consonants. Splitting it apart reveals 3 words: fire, base, app. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Sec the bigaer picture 8 ee 8 a ree Henting, wwe? amit 8 ee a, oe, lh aoe deo To We te A Cooetong Card IY Oa Sa 0: tae oe | 9 een o | orcomee Fc} Hf ae oy oe PS Privacy & Transparency headiinelo...

Page Load Overview

N/A
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,552 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media73% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
73%
social_media
25%
forum
20%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16172.236.96.118Chicago, Illinois, United States
AS63949Akamai Connected Cloud
4199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
446.8.8.220Prague, Prague, Czech Republic
AS60592Gransy s.r.o.
4162.4.84.255Australia
AS154653ParkLogic Pty Ltd
4172.234.216.100Chicago, Illinois, United States
AS63949Akamai Connected Cloud
4151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
4142.251.13.156Google · CDNUnited States
AS15169Google LLC
4172.67.199.186Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.67.170.144Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
015--

Detected Technologies3

PasswordField
100%
JQueryv3.5.1
100%
Google-AnalyticsvUniversal
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16F934321B4F851B6415350EC76A27B7EBE65D417CB42492CBAEC7BA08F82DC39D1314E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:6CgWEokn/fJqUYzVzTnCpoBEFFbCLgeP/fhmMxUicWSnESaYpJHo73z+6sXKjEEm:6Cg4q40YHcvn62po73z+6sXKjEEfu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94980:AAgEjMbApEyBIECNwhIBAvEBRMpCQCHgBgQHuGtIZgQAGASBEwTPYYiohATFM0RSkKFQBfBDFmAQKBQJwBAZAgOAEwOFBgDg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:008100010101ffff
Perceptual Hash:bb36c43439c16b36
Difference Hash:8439191b1f1b2b3b
Wavelet Hash:00ff81818181ffff
Color Hash:06e00008000

Other Hashes

Crop Resistant:8439191b1f1b2b3b,940339591b1d1b29

Scan History

Scan history not available

Unable to load historical scan data