Security Scan: Online

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e9dfbbc3-9697-4449-9da4-6983d64c4f88 Domain and IP registration (RDAP)/api/v1/rdap/e9dfbbc3-9697-4449-9da4-6983d64c4f88How often this domain was scanned/api/v1/domain/stats/re-register-user-login.firebaseapp.com Scan history for this domain/api/v1/domain/history/re-register-user-login.firebaseapp.com?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is firebaseapp.com and was registered 14 years ago.

Submitted URL: https://re-register-user-login.firebaseapp.com/

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Analyst-vetted UK mobile/bank 'account recovery' phishing kit confirmed by a critical YARA rule on a cloaked Firebase subdomain; the lure is hidden from scanners and only shown to targeted UK phones.

Risk Factors (5)

Known, analyst-vetted phishing kit identified on the page (UK mobile carrier/bank account-recovery look-alikes)

Critical YARA signature UK_Mobile_Recovery_OwnerInfo_Cloak_Kit matched the HTML body

Deliberate cloaking: page shows only generic filler text to non-targeted visitors/scanners

Deceptive subdomain on free Firebase hosting impersonating an account-recovery flow

No Cisco Umbrella ranking for the domain

Domain age information unavailable

Details

Page Title

Online

Scan Type

public

Favicon Hash

MMH3: 1791640551

MD5: e03758dabc4f015f57e236cdc9a00875

Domain Name Analysis

Domain 're-register-user-login.firebaseapp.com' uses the commercial generic top-level domain (.com) with subdomain 're-register-user-login'. The registrable portion 'firebaseapp' spans 11 characters holding 5 vowels versus six consonants. Tokenizing the label suggests three words: fire, base, app. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.