Security Scan: https://jnvfywgscznzg.web.app/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f125e9c4-b5f8-4912-87bb-4f2966198372 Domain and IP registration (RDAP)/api/v1/rdap/f125e9c4-b5f8-4912-87bb-4f2966198372How often this domain was scanned/api/v1/domain/stats/jnvfywgscznzg.web.app Scan history for this domain/api/v1/domain/history/jnvfywgscznzg.web.app?limit=15

This website contacted 2 IPs in 1 country across 3 domains to perform 4 HTTP transactions. The main domain is web.app and was registered 7 years ago.

Submitted URL: https://jnvfywgscznzg.web.app/

Effective URL:

https://account-bestatigung-registration.com/tf-kreditkarte

Redirected

AI Security Verdict

Moderate Risk

Confidence: 78%

Risk Score

Throwaway Firebase subdomain that silently redirects to a deceptively named 'account confirmation' domain with a credit-card path — a textbook phishing redirect chain. Do not proceed.

Risk Factors (4)

Random throwaway subdomain on shared Firebase Hosting used solely as a redirect hop

Cross-domain redirect to a deceptive 'account confirmation registration' domain with a credit-card-themed path

German-language 'please wait' interstitial typical of cloaked redirect chains targeting DACH-region users

Deceptive hostname engineered to look like an account-verification page

Safety Factors (5)

No credential, password or payment form was present on the submitted page itself

No threat-intelligence, hunting rule or IDS matches against the submitted page or its scripts

All scripts on the submitted page came from its own origin, with no cross-origin credential handling observed

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'jnvfywgscznzg.web.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'jnvfywgscznzg'. Count 3 characters in 'web' holding 1 vowel versus two consonants. Word splitting yields 1 word: web. No strong language cues emerged from the frequency lists.

Screenshot

Domain does not exist

There was no DNS record for account-bestatigung-registration.com when we scanned it, so there is no screenshot.

Page Load Overview

0.36s

Total Load Time

5 KB

Total Size

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	199.36.158.100Fastly · CDN	United States	AS54113Fastly, Inc.
2	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
4	2	-	-

Detected Technologies3

HTTP/3

40%

HSTS

40%

Firebase

40%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A

Perceptual Hash:N/A

Difference Hash:N/A

Wavelet Hash:N/A

Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: jnvfywgscznzg.web.app