Security Report: mail2update-c386.web.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f051b424-b1ce-47a1-9e8c-3ed860101d5c Domain and IP registration (RDAP)/api/v1/rdap/f051b424-b1ce-47a1-9e8c-3ed860101d5c Certificate Transparency/api/v1/ct/mail2update-c386.web.app How often this domain was scanned/api/v1/domain/stats/mail2update-c386.web.app Scan history for this domain/api/v1/domain/history/mail2update-c386.web.app?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 19 HTTP transactions. The main domain is mail2update-c386.web.app and was registered 7 years ago.

Submitted URL: https://mail2update-c386.web.app/

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

Fake 'Roundcube Webmail' login hosted on a Firebase subdomain that submits username and password to an external site (liveformhq.com) — a credential-harvesting phishing page.

Risk Factors (4)

Credential form (username + password) on a suspicious free-hosting subdomain

Cross-origin form submission sending credentials to liveformhq.com

Impersonation of the Roundcube Webmail login interface on a non-official domain

Descriptive hostname ('mail2update') inconsistent with an official mail provider

Domain age information unavailable

Details

Page Title

Roundcube Webmail :: Welcome to Roundcube Webmail

Scan Type

public

Domain Name Analysis

The domain name 'mail2update-c386.web.app' uses the application-focused generic top-level domain (.app) with subdomain 'mail2update-c386'. The registrable portion 'web' spans 3 characters split between 1 vowel and two consonants. Splitting it apart reveals 1 word: web. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.