Security Scan Report: webmail-cisco.firebaseapp.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 2 domains to perform 5 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://webmail-cisco.firebaseapp.com/

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Empty placeholder page on a firebaseapp subdomain whose name mimics Cisco webmail. No forms or credential capture and no threat-intel hits, but the deceptive hostname and unverifiable age warrant caution.

Risk Factors (3)
Deceptive hostname implying a Cisco webmail service on infrastructure Cisco does not operate
Free hosting-platform subdomain whose actual creation date cannot be verified
Empty placeholder page consistent with an unfinished or not-yet-deployed phishing template
Safety Factors (4)
No forms of any kind: no password, payment or email/username fields on the page
No cross-origin credential exfiltration and no cross-origin form submissions
No indicators of compromise, no hunting rule malware matches, no IDS alerts, no known-kit roster match
No obfuscated or behaviorally suspicious JavaScript detected
Domain age information unavailable

Details

Page Title

Sample Background

Scan Type

public

Domain Name Analysis

The domain name 'webmail-cisco.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 'webmail-cisco'. Its registrable label 'firebaseapp' stretches across 11 characters holding five vowels versus 6 consonants. Word splitting yields three words: fire, base, app. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://webmail-cisco.firebaseapp.com/

Page Load Overview

0.45s
Total Load Time
9 KB
Total Size

Language Analysis

Primary Language

πŸ‡ΊπŸ‡ΈEnglish
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:17 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5199.36.158.100Fastly Β· CDNUnited States
AS54113Fastly, Inc.
51--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T184C2F7178E463C81DB81CED6D1FD9CDD6A2D830E29C6988EC5BAFDC1C47AA18B4D506C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:82TZmXg8qz7v9UpnDtq7ZSThL10ceMpa9MGYXtl5Y0m+Tn20CH9n8n9ndgU:dTZmXZkyz6H9n5U

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27975:IGEqBELTQBhgIWgGMHBN0IwQwAmmQ4xZJCAAkBI4HSAkR9FhcGmYyVGMzRiRXpJwTqUBhxAoOgSKVQiIhwAwxEFUBmDknqAY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data