Security Scan: port-3000-php-mango-monkey-hermannluca9051891

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/df4979cf-a405-4e09-a2e4-2da49cca3a36 Domain and IP registration (RDAP)/api/v1/rdap/df4979cf-a405-4e09-a2e4-2da49cca3a36How often this domain was scanned/api/v1/domain/stats/colne-3f89k.firebaseapp.com Scan history for this domain/api/v1/domain/history/colne-3f89k.firebaseapp.com?limit=15

This website contacted 2 IPs in 1 country across 2 domains to perform 5 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://colne-3f89k.firebaseapp.com/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Disposable Firebase Hosting stub that redirects to a Codeanywhere container, matching an analyst-vetted phishing kit used for bank, postal and tax credential theft across Europe. Do not visit or enter any data.

Risk Factors (5)

Known malicious phishing kit identified by analyst-vetted kit roster (Firebase → Codeanywhere redirect stub family)

Disposable Firebase Hosting subdomain used as a redirect entry point to external container-hosted phishing

Redirect target is a throwaway development container hostname, a pattern used to evade domain blocklists

Unknown creation date on shared hosting platform naming space

Unranked in Cisco Umbrella with no legitimate site identity

Domain age information unavailable

Details

Page Title

port-3000-php-mango-monkey-hermannluca90518914.codeanyapp.comother network

Scan Type

public

Domain Name Analysis

The domain 'colne-3f89k.firebaseapp.com' uses the commercial generic top-level domain (.com) and includes subdomain 'colne-3f89k'. Its registrable label 'firebaseapp' stretches across 11 characters containing five vowels alongside six consonants. Segmentation suggests three words: fire, base, app. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

N/A

Total Load Time

1 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:879 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software71% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

71%

documentation technical

43%

adult content

33%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	198.199.109.95	San Francisco, California, United States	AS14061DigitalOcean, LLC
0	2	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T104048F77329A063986558498F45B43099F20B143F50AC8BC79BCBAD9BFDED06107BB78

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:R/Qho9PKBbl8Vrq9Jzbs6tlg1ySBKw4Q9gcoIsPJ2bMy8Old5:yhoCl8Bqzzbs6okSCggcpsx2eA3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:188336:Bx6mmBQABkNSBA4QRErp2cg2dI6AdgRJQJwUZGzUiHNhCEjmAiCEgAiqAiJgBwCiKBARyQBEhgwcTDUJAAiWhRxcIIwEgLMR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffcfc7c3d3ffffff

Perceptual Hash:b1338ecccc333365

Difference Hash:00181c1c16000000

Wavelet Hash:fcdcc0c4c0fcf0f0

Color Hash:#a987c5

Other Hashes

Crop Resistant:00181c1c16000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: colne-3f89k.firebaseapp.com