ScanMalware.com

Security Scan Report: office-ce1ca.web.app

Redirected to:
https://firebasestorage.googleapis.com/v0/b/office-ce1ca.appspot.com/o...
Response type:API response (JSON)application/jsonHTTP 402The server returned machine-readable data for programs (an API response), not a web page. The screenshot shows how a browser displays the raw data.
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d577d36b-d6b3-4b4a-a1d8-b2299cc187eaDomain and IP registration (RDAP)/api/v1/rdap/d577d36b-d6b3-4b4a-a1d8-b2299cc187eaHow often this domain was scanned/api/v1/domain/stats/office-ce1ca.web.appScan history for this domain/api/v1/domain/history/office-ce1ca.web.app?limit=15
This website contacted 4 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://office-ce1ca.web.app/

Effective URL:
https://firebasestorage.googleapis.com/v0/b/office-ce1ca.appspot.com/o...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

Free .web.app subdomain carrying a single-source phishing report, serving bucket-backed content via a tokenised URL; the page itself currently returns only a Firebase 402 error with no forms or scripts, so the suspicion rests on the phishing report and hosting pattern.

Risk Factors (4)
Single-source phishing threat-intel report on the primary domain
Free instant-subdomain hosting with undeterminable page creation date
Content served from a tokenised bucket object rather than a normal hosted page
Entry domain unranked in Cisco Umbrella and shared-tenant on web.app
Safety Factors (6)
No credential, login, or payment forms detected in the captured DOM
No JavaScript malware patterns or high-precision hunting-rule hits
No network IDS alerts
No obfuscated scripts, cross-origin credential submission, or exfiltration behaviour observed
Current response is a plain Firebase billing/configuration error with no user-facing lure
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no hunting rule / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'office-ce1ca.web.app' on the application-focused generic top-level domain (.app) with subdomain 'office-ce1ca'. The second-level label 'web' is 3 characters long with one vowel and two consonants. Word splitting yields one word: web. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://office-ce1ca.web.app/

Page Load Overview

0.75s
Total Load Time
3 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:406 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical50% confidence
Type: static
Method: ml+structural

All Detected Categories

documentation technical
50%
technology software
39%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1172.217.115.4Google · CDNUnited States
AS15169Google LLC
1199.36.158.100Fastly · CDNUnited States
AS54113Fastly, Inc.
1172.217.112.4Google · CDNUnited States
AS15169Google LLC
1172.217.113.4Google · CDNUnited States
AS15169Google LLC
44--

Detected Technologies3

HTTP/3
40%
HSTS
40%
Firebase
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16CF02663D4D14517073912ECF7E13209EE59752CA33D4D8D7580907C9BDBC2E85170D4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:kxV7HfJQ6XQs75YMu6ao7SDdugHACX27e2YvKHV4W6Y7xELa:kHFQ6b5YMHNWQggj7MS1b6pa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:569:AAAAAAQAAAAAEAAAAAAAAEAAAAAAAABAEAAAAAAIEAAAAAAAAAAIAAAAAEAAAAAAAAAAAABAAAAAAAAIAAAAACAAAAAAAACA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000fffffffffffff
Perceptual Hash:b3323232324e4fcf
Difference Hash:9818000000000000
Wavelet Hash:007fffff00000000
Color Hash:#bf4095

Other Hashes

Crop Resistant:9818000000000000

Scan History

Scan history not available

Unable to load historical scan data